Product · WebWork

WebWork PHP script

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 5.1

CVE-2025-40642

Reflected Cross-Site Scripting (XSS) in WebWork

Reflected Cross-Site Scripting (XSS) vulnerability in WebWork, which allows remote attackers to execute arbitrary code through the 'q' and 'engine' request parameters in /search.

WebWork WebWork PHP script

Sep 8, 2025