CyberRota Analysis
This vulnerability has an unknown severity rating. It may be remotely exploitable.
CVE
CVE-2025-40642
Severity
UNKNOWN
CVSS
N/A
EPSS
0.48%
Original NVD Description
Reflected Cross-Site Scripting (XSS) vulnerability in WebWork, which allows remote attackers to execute arbitrary code through the 'q' and 'engine' request parameters in /search.