CVE-2020-13405

Published July 16th, 2020

View on NVD ↗

CVSS v3

7.5

HIGH

CVSS v2

MEDIUM

Affected

PROJECT

Description

userfiles/modules/users/controller/controller.php in Microweber before 1.1.20 allows an unauthenticated user to disclose the users database via a /modules/ POST request.

microweber/microweber

Drag and Drop Website Builder and CMS with E-commerce

GitHub

3.42K