mar10
Products
| Product | CVEs | Exploited | Latest |
|---|---|---|---|
| wsgidav | 3 | – | Aug 28, 2026 |
Exploited and recent CVEs
- CVE-2026-55509 WsgiDAV: Blind SQL injection in the MySQL provider 0.5%
- CVE-2026-48099 WsgiDAV encoded dot segments can escape filesystem share roots 0.3%
- CVE-2022-41905 wsgidav is vulnerable to Cross-Site Scripting (XSS) when directory browsing is enabled 0.4%