Webreinvent vulnerabilities
We track 1 vulnerability in Webreinvent products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 29, 2026.
1vulnerabilities
0critical
1high
0exploited
8.1average CVSS score
Latest Webreinvent vulnerabilities
- 8.1 High severity
vaahcms: Embedded Malicious Code
VaahCMS versions 2.0.0 through 2.3.4 contain a malicious obfuscated JavaScript payload embedded in the Blade template responsible for rendering security OTP emails, allowing remote attackers to execute unauthorized code in any browser that renders the affected