Skip to content
OpenAdvisories

Vendor

WebWork

1 known vulnerabilities.

Products

WebWork PHP script 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.1
    CVE-2025-40642

    Reflected Cross-Site Scripting (XSS) in WebWork

    Reflected Cross-Site Scripting (XSS) vulnerability in WebWork, which allows remote attackers to execute arbitrary code through the 'q' and 'engine' request parameters in /search.

    WebWork WebWork PHP script