{"schema":"threatline.record/2","record":{"id":"CVE-2026-116212","aliases":[],"summary":"Webasyst Framework through 4.4.0 Stored XSS via Photos Album URL","details":"Webasyst Framework through 4.4.0 contains a stored cross-site scripting vulnerability in the Photos app that allows authenticated backend users to inject JavaScript via the album url parameter. Attackers with album edit rights can save a url value that breaks out of the unescaped attribute in DialogAlbumSettings.html, executing JavaScript in administrators' backend sessions.","categories":["Unclassified"],"product":"Webasyst Framework","vendor":"Webasyst","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-116212","source_modified_at":"2026-10-26T13:08:45.751Z","fetched_at":"2026-10-26T19:10:57.178988Z","product":"Webasyst Framework","vendor":"Webasyst","versions":[{"version":"0","status":"affected","lessThanOrEqual":"4.4.0","versionType":"custom"}],"defaultStatus":"unaffected"}],"fixed_versions":[],"cvss":5.1,"severity":"Medium","kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-26T13:08:45.751Z","modified_at":"2026-10-26T13:08:45.751Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-116212","fetched_at":"2026-10-26T19:10:57.178988Z","source_modified_at":"2026-10-26T13:08:45.751Z"}],"sources":["CVE List"],"references":[{"source":"CVE List","url":"https://github.com/webasyst/webasyst-framework/issues/395","tags":["issue-tracking"]},{"source":"CVE List","url":"https://github.com/webasyst/webasyst-framework/blob/cc609e5db23e68d982e15ebf65bf9d25120333af/wa-apps/photos/templates/actions/dialog/DialogAlbumSettings.html#L36","tags":["technical-description"]},{"source":"CVE List","url":"https://github.com/webasyst/webasyst-framework/blob/cc609e5db23e68d982e15ebf65bf9d25120333af/wa-apps/photos/lib/actions/album/photosAlbumSave.controller.php#L107","tags":["technical-description"]},{"source":"CVE List","url":"https://github.com/webasyst/webasyst-framework","tags":["product"]},{"source":"CVE List","url":"https://www.vulncheck.com/advisories/webasyst-framework-through-4.4.0-stored-xss-via-photos-album-url","tags":["third-party-advisory"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-26T13:08:45.751Z","content_hash":"5094a837401d823766c5a93168c7cb95a36b29e7cb85add92f13ad75f4964a12"}}