microweber 2.0.16 was discovered to contain a Cross Site Scripting (XSS) vulnerability via userfiles\modules\settings\admin.php.
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')