Skip to content
OpenAdvisories

Vendor

Webasyst

3 known vulnerabilities.

Products

Webasyst Framework 3
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 4.9
    CVE-2026-116213

    Webasyst Framework through 4.4.0 Arbitrary File Read via waArchiveTar Symlinks

    Webasyst Framework through 4.4.0 contains an arbitrary file read vulnerability in waArchiveTar::writeItem() that creates symlinks from theme archives without validating link targets. Authenticated users with theme management rights can upload themes containin…

    Webasyst Webasyst Framework
  • Medium 6.5
    CVE-2026-116210

    Webasyst Framework through 4.4.0 Photos App CSRF via Backend Actions

    Webasyst Framework through 4.4.0 contains a cross-site request forgery vulnerability in the Photos app that allows remote attackers to perform backend actions because the app does not enable the framework's opt-in CSRF check. Attackers can lure logged-in Phot…

    Webasyst Webasyst Framework
  • Medium 5.4
    CVE-2026-116212

    Webasyst Framework through 4.4.0 Stored XSS via Photos Album URL

    Webasyst Framework through 4.4.0 contains a stored cross-site scripting vulnerability in the Photos app that allows authenticated backend users to inject JavaScript via the album url parameter. Attackers with album edit rights can save a url value that breaks…

    Webasyst Webasyst Framework