CVE-2025-40642

creationtimestamp| type| source ---|---|--- 2025-09-08 14:58:36+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lydhpzzyn72r...

CVE-2025-40642 Reflected Cross-Site Scripting (XSS) in WebWork

Reflected Cross-Site Scripting XSS vulnerability in WebWork, which allows remote attackers to execute arbitrary code through the 'q' and 'engine' request parameters in /search...