CVE-2025-51504: XSS
Microweber CMS 2.0 is vulnerable to Cross Site Scripting (XSS) in the /projects/profile, homepage endpoint via the last name field.
Other sources
Microweber CMS 2.0 is vulnerable to Cross Site Scripting (XSS)in the /projects/profile, homepage endpoint via the last name field.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-51504?
CVE-2025-51504 has a medium severity level due to its potential for Cross Site Scripting (XSS) attacks.
How do I fix CVE-2025-51504?
To fix CVE-2025-51504, sanitize and validate user inputs in the last name field to prevent XSS exploitation.
What software is affected by CVE-2025-51504?
CVE-2025-51504 affects Microweber CMS versions 2.0.
What are the implications of CVE-2025-51504?
The implications of CVE-2025-51504 include the potential for attackers to inject malicious scripts that could impact users of the CMS.
How can I mitigate CVE-2025-51504 in my application?
To mitigate CVE-2025-51504, implement strict input validation and output encoding for all user-supplied data.