CVE-2025-60954
Microweber CMS 2.0 has Weak Password Requirements. The application does not enforce minimum password length or complexity during password resets. Users can set extremely weak pa…
Published: 2025-10-24 · CVSS: 8.3 · CVSS 3.1
Microweber CMS 2.0 has Weak Password Requirements. The application does not enforce minimum password length or complexity during password resets. Users can set extremely weak passwords, including single-character passwords, which can lead to account compromise, including administrative accounts.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7