RAONwiz — Vulnerabilities & Security Advisories 8

RAONWiz is a web application framework primarily used for developing enterprise portals and content management systems. Historically, it has been vulnerable to multiple remote code execution (RCE) flaws, cross-site scripting (XSS), and privilege escalation vulnerabilities, with eight CVEs recorded to date. These issues often stem from insufficient input validation and improper access controls. The framework's widespread adoption in Korean government and financial sectors has made it a high-profile target. In 2021, a critical RCE vulnerability (CVE-2021-38314) allowed unauthenticated attackers to execute arbitrary code, leading to widespread exploitation in production environments.