CVE-2025-51501: XSS
Published Aug 1, 2025
·Updated
Reflected Cross-Site Scripting (XSS) in the id parameter of the liveedit.modulesettings API endpoint in Microweber CMS2.0 allows execution of arbitrary JavaScript.
Affected Software
3 affected components
Microweber Microweber CMS
composer/microweber/microweber>=2.0.0<=2.0.19
Microweber Microweber=2.0.0
Event History
Aug 1, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·05:15 PM
Affected Software
Advisory Published
via GitHub·06:31 PM
Data Sourced
via GitHub·06:31 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-51501?
CVE-2025-51501 is classified as a high severity vulnerability due to its potential for executing arbitrary JavaScript code.
2
How do I fix CVE-2025-51501?
To fix CVE-2025-51501, ensure that user input in the id parameter is properly sanitized and validated to prevent XSS.
3
What type of attack does CVE-2025-51501 facilitate?
CVE-2025-51501 facilitates reflected cross-site scripting (XSS) attacks.
4
What systems are affected by CVE-2025-51501?
CVE-2025-51501 affects Microweber CMS version 2.0.
5
How can I mitigate the risk of CVE-2025-51501?
Mitigation for CVE-2025-51501 involves implementing security controls to sanitize input and employ security headers to reduce XSS risks.