PT-2025-31652 · Unknown · Microweber Cms

Progprnv · Published 2025-08-01 · Updated 2025-08-19 · CVE-2025-51504

Positive Technologies (AI Summary)

CVSS v3.1

7.6

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

Name of the Vulnerable Software and Affected Versions Microweber CMS version 2.0

Description Microweber CMS 2.0 is susceptible to Cross Site Scripting (XSS) attacks. The vulnerability exists in the /projects/profile homepage endpoint via the last name field.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-51504

GHSA-2X2J-3C2V-G3C2

Affected Products

Microweber Cms

References · 10

• 🔥 https://github.com/progprnv/CVE-Reports/blob/main/MICROWEBER%20%5BLive%20Panel%5D%20Stored%20XSS%20in%20profile%20path.md · Exploit
• 🔥 https://github.com/progprnv/CVE-Reports · Exploit
• 🔥 https://github.com/progprnv/CVE-Reports/blob/main/CVE-2025-51504 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-51504 · Security Note
• https://osv.dev/vulnerability/GHSA-2x2j-3c2v-g3c2 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-51504 · Vendor Advisory
• https://github.com/microweber/microweber · Note
• https://t.me/cveNotify/132806 · Telegram Post
• https://twitter.com/CVEnew/status/1951325418968985623 · Twitter Post
• https://t.me/CVEtracker/28959 · Telegram Post