Reflected Cross-Site Scripting (XSS) exists in Microweber CMS 2.0 through the layout parameter on the /admin/page/create page. It allows arbitrary JavaScript to execute in the context of authenticated admin users.
id: CVE-2025-51502
info:
name: Microweber CMS 2.0 - Reflected XSS in Admin Page Creation
author
...