Login Request a demo
WF
Product
Webasyst Framework
by Webasyst · last CVE Oct 26, 2026
5
CVEs
0
On KEV
6.5
Max CVSS
3
New 30D
Vulnerabilities5In the news0Timeline
Severity mix
Critical 0High 0Medium 5Low 0
Severity
All severities5Critical0High0Medium5Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Webasyst Framework to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-116210
New
6.5
0%
Oct 26
Webasyst Framework through 4.4.0 Photos App CSRF via Backend Actions
Affected: through 4.4.0
CVE-2026-116212
New
5.4
0%
Oct 26
Webasyst Framework through 4.4.0 Stored XSS via Photos Album URL
Affected: through 4.4.0
CVE-2024-29413
5.4
0%
Apr 3
Cross Site Scripting vulnerability in Webasyst v.2.9.9 allows a remote attacker to run arbitrary code via the Instant messenger field in the Contact info function
Affected: 2.9.9
CVE-2024-27517
5.4
0%
Feb 28
Webasyst 2.9.9 has a Cross-Site Scripting (XSS) vulnerability, Attackers can create blogs containing malicious code after gaining blog permissions
Affected: 2.9.9
CVE-2026-116213
New
4.9
0%
Oct 26
Webasyst Framework through 4.4.0 Arbitrary File Read via waArchiveTar Symlinks
Affected: through 4.4.0
Showing 5