Skip to content
OpenAdvisories

Vendor

webrecorder

2 known vulnerabilities.

Products

browsertrix 1 wabac.js 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.1
    CVE-2025-58765

    wabac.js has XSS vulnerability in 404 error handling logic

    wabac.js provides a full web archive replay system, or 'wayback machine', using Service Workers. A Reflected Cross-Site Scripting (XSS) vulnerability exists in the 404 error handling logic of wabac.js v2.23.10 and below. The parameter `requestURL` (derived fr…

    webrecorder wabac.js replaywebpage @webrecorder/wabac npm