2025-09-08 11:25:15
INCIBE
PUBLISHED
Reflected Cross-Site Scripting (XSS) vulnerability in WebWork, which allows remote attackers to execute arbitrary code through the q and engine request parameters in /search.