Vulnerabilities

TI-2026-01921 CVE-2026-2276 · GHSA-p5f8-584h-2hr3

Reflected Cross-Site Scripting in the Wix web application

LOW 24

Reflected Cross-Site Scripting (XSS) vulnerability in the Wix web application, where the endpoint ' https://manage.wix.com/account/account-settings ', responsible for uploading SVG images, does not properly sanitize the…

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00423 Published 2026-02-12 No fix listed CWE-79

TI-2025-03391 CVE-2025-3841 · GHSA-q438-4f7x-vcx4

wix-incubator jam Jinja2 Template jam.py special elements used in a template engine

MEDIUM 55

A vulnerability, which was classified as problematic, was found in wix-incubator jam up to e87a6fd85cf8fb5ff37b62b2d68f917219d07ae9.

CVSS 4.0MEDIUM 4.8 Local Low privileges No interaction EPSS 0.00451 Published 2025-04-21 No fix listed CWE-1336

TI-2023-20255 CVE-2023-39021 · GHSA-fx3v-4w3w-wpwr

wix-embedded-mysql v4.6.1 and below was discovered to contain a code injection…

HIGH 82

wix-embedded-mysql v4.6.1 and below was discovered to contain a code injection vulnerability in the component com.wix.mysql.distribution.Setup.apply.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0104 Published 2023-07-28 No fix listed CWE-94

Vulnerabilities

Filters

Reflected Cross-Site Scripting in the Wix web application

wix-incubator jam Jinja2 Template jam.py special elements used in a template engine

wix-embedded-mysql v4.6.1 and below was discovered to contain a code injection…