Description
Reflected Cross-Site Scripting (XSS) vulnerability in WebWork, which allows remote attackers to execute arbitrary code through the 'q' and 'engine' request parameters in /search.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| WebWork | WebWork PHP script | all versions | — |