Webiny is a headless CMS and application platform with a focused vulnerability footprint centered on its core product, where the observed weakness class involves improper input handling in web-page generation contexts such as cross-site scripting. Live severity, exploitation, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Webiny over time
Signals from CVEs in this vendor scope (1 CVEs).
1 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-41167MEDIUM @webiny/react-rich-text-renderer before 5.37.2 allows XSS attacks by content managers. This is a react component to render data coming from Webiny Headless CMS and Webiny Form Buil | Aug 25, 2023 | 4.8 | 17 | NO | NO |
Signals from CVEs in this vendor scope (1 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Webiny.
Media articles that mention a CVE ID that affects a product developed by Webiny — matched by CVE ID, not by vendor name.