Beveiligingsadvies

CVE-2025-40642

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-09-08 11:25:15
Laatst bijgewerkt 2025-09-08 13:36:31
Toegewezen door INCIBE
CVSS-score 5.1
Status PUBLISHED

Beschrijving

Reflected Cross-Site Scripting (XSS) vulnerability in WebWork, which allows remote attackers to execute arbitrary code through the 'q' and 'engine' request parameters in /search.