CVE-2018-19917

Microweber 1.0.8 has reflected cross-site scripting (XSS) vulnerabilities.

• CWE-79

• http://packetstormsecurity.com/files/151005/Microweber-1.0.8-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2019/Jan/12Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2019/Jan/25Mailing List, Third Party Advisory
• https://github.com/microweber/microweber/commits/masterThird Party Advisory
• https://www.netsparker.com/web-applications-advisories/ns-18-038-reflected-cross-site-scripting-in-microweber/Third Party Advisory
• http://packetstormsecurity.com/files/151005/Microweber-1.0.8-Cross-Site-Scripting.htmlExploit, Third Party Advisory, VDB Entry
• http://seclists.org/fulldisclosure/2019/Jan/12Mailing List, Third Party Advisory
• http://seclists.org/fulldisclosure/2019/Jan/25Mailing List, Third Party Advisory
• https://github.com/microweber/microweber/commits/masterThird Party Advisory
• https://www.netsparker.com/web-applications-advisories/ns-18-038-reflected-cross-site-scripting-in-microweber/Third Party Advisory

Published

Mar 21, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-19908An issue was discovered in MISP 2.4.9x before 2.4.99. In app…
• CVE-2018-1991IBM API Connect 5.0.0.0, and 5.0.8.6 could could return sens…2.7
• CVE-2018-19911FreeSWITCH through 1.8.2, when mod_xml_rpc is enabled, allow…
• CVE-2018-19913DomainMOD through 4.11.01 has XSS via the assets/add/registr…
• CVE-2018-19914DomainMOD through 4.11.01 has XSS via the assets/add/dns.php…
• CVE-2018-19915DomainMOD through 4.11.01 has XSS via the assets/edit/host.p…
• CVE-2018-19918CuppaCMS has XSS via an SVG document uploaded to the adminis…5.4
• CVE-2018-19919Pixelimity 1.0 has Persistent XSS via the admin/portfolio.ph…
• CVE-2018-1992The IBM Power 9 OP910, OP920, and FW910 boot firmware's boot…6.4
• CVE-2018-19921Zoho ManageEngine OpManager 12.3 before 123237 has XSS in th…
• CVE-2018-19922Persistent Cross-Site Scripting (XSS) in the advancedsetup_w…
• CVE-2018-19923An issue was discovered in Sales & Company Management System…