Webstudio - vulnerabilities (CVEs)

2 CVEs in 1 products, 0 in the last 30 days, newest from 2026-09-05.

Products

• Ultimate Loan Manager - 2 CVEs

Newest CVEs of Webstudio

• CVE-2026-86119 - CVSS 9.2 (critical), 2026-09-05: Webstudio through 0.296.0 contains an unauthenticated server-side request forgery vulnerability in the /cgi/image, /cgi/video, and /cgi/asset proxy routes…
• CVE-2019-14427 - CVSS 6.1 (medium), 2019-08-14: XSS exists in WEB STUDIO Ultimate Loan Manager 2.0 by adding a branch under the Branches button that sets the notes parameter with crafted JavaScript code.