WE
Vendor
Webasyst
9
CVEs
0
On KEV
3
New 30D
Products
WF6.5
Webasyst Framework
Webasyst
5 CVEs0 on KEV3 new
SH–
Shop-script
Webasyst
3 CVEs0 on KEV0 new
WE5.4
Webasyst
Webasyst
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-116213 New | WF Webasyst Framework Webasyst | 4.9 | Oct 26 | Webasyst Framework through 4.4.0 Arbitrary File Read via waArchiveTar Symlinks |
| CVE-2026-116212 New | WF Webasyst Framework Webasyst | 5.4 | Oct 26 | Webasyst Framework through 4.4.0 Stored XSS via Photos Album URL |
| CVE-2026-116210 New | WF Webasyst Framework Webasyst | 6.5 | Oct 26 | Webasyst Framework through 4.4.0 Photos App CSRF via Backend Actions |
| CVE-2024-29413 | WE Webasyst-framework Webasyst | 5.4 | Apr 3 | Cross Site Scripting vulnerability in Webasyst v.2.9.9 allows a remote attacker to run arbitrary code via the Instant messenger field in the Contact info function |
| CVE-2024-27517 | WE Webasyst Webasyst | 5.4 | Feb 28 | Webasyst 2.9.9 has a Cross-Site Scripting (XSS) vulnerability, Attackers can create blogs containing malicious code after gaining blog permissions |
| CVE-2014-8377 | SH Shop-script Webasyst | – | Oct 21 | Cross-site scripting (XSS) vulnerability in Webasyst Shop-Script 5.2.2.30933 allows remote attackers to inject arbitrary web script or HTML via the phone number field in a new… |
| CVE-2010-4859 | SH Shop-script Webasyst | – | Oct 5 | SQL injection vulnerability in index.php in WebAsyst Shop-Script allows remote attackers to execute arbitrary SQL commands via the blog_id parameter in a news action |
| CVE-2010-1464 | SH Shop-script Webasyst | – | Apr 16 | Multiple cross-site scripting (XSS) vulnerabilities in WebAsyst Shop-Script FREE allow remote attackers to inject arbitrary web script or HTML via the (1) currency_id_left, (2)… |