Webasyst Framework vulnerabilities | LiveThreat CVE Feed — Verisq

Login Request a demo

WF

Product

Webasyst Framework

by Webasyst · last CVE Oct 26, 2026

5

CVEs

0

On KEV

6.5

Max CVSS

3

New 30D

Vulnerabilities5 In the news0 Timeline

Severity mix

Critical 0High 0Medium 5Low 0

Severity

All severities5 Critical0 High0 Medium5 Low0

Exploitation

On CISA KEV0 Exploited in the wild0

Watch

Add Webasyst Framework to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2026-116210 New	6.5	0%	Oct 26	Webasyst Framework through 4.4.0 Photos App CSRF via Backend Actions Affected: through 4.4.0
CVE-2026-116212 New	5.4	0%	Oct 26	Webasyst Framework through 4.4.0 Stored XSS via Photos Album URL Affected: through 4.4.0
CVE-2024-29413	5.4	0%	Apr 3	Cross Site Scripting vulnerability in Webasyst v.2.9.9 allows a remote attacker to run arbitrary code via the Instant messenger field in the Contact info function Affected: 2.9.9
CVE-2024-27517	5.4	0%	Feb 28	Webasyst 2.9.9 has a Cross-Site Scripting (XSS) vulnerability, Attackers can create blogs containing malicious code after gaining blog permissions Affected: 2.9.9
CVE-2026-116213 New	4.9	0%	Oct 26	Webasyst Framework through 4.4.0 Arbitrary File Read via waArchiveTar Symlinks Affected: through 4.4.0