Skip to content
OpenAdvisories

Vendor

Wix

1 known vulnerabilities.

Products

web application 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.3
    CVE-2026-2276

    Reflected Cross-Site Scripting in the Wix web application

    Reflected Cross-Site Scripting (XSS) vulnerability in the Wix web application, where the endpoint ' https://manage.wix.com/account/account-settings ', responsible for uploading SVG images, does not properly sanitize the content. An authenticated attacker coul…

    Wix web application