VULNERABILITY INTELLIGENCE
CVE-2025-40642
EPSS probability0.52%
CISA KEVNot currently listed
Published2025-09-08
Last modified2026-09-30
Description
Reflected Cross-Site Scripting (XSS) vulnerability in WebWork, which allows remote attackers to execute arbitrary code through the 'q' and 'engine' request parameters in /search.
Weakness classification
- cve-coordination@incibe.es: CWE-79