CVE-2020-13241
EUVD-2022-315720.05.2020, 19:15
Microweber 1.1.18 allows Unrestricted File Upload because admin/view:modules/load_module:users#edit-user=1 does not verify that the file extension (used with the Add Image option on the Edit User screen) corresponds to an image file.Enginsight
Affected Products (NVD)
| Vendor | Product | Version |
|---|---|---|
| microweber | microweber | 1.1.18 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration