webaways — Vulnerabilities & Security Advisories 13

Webaways provides web application development and hosting services, primarily serving businesses requiring custom online solutions. Historically, their products have been vulnerable to multiple remote code execution (RCE) and cross-site scripting (XSS) flaws, often stemming from improper input validation. Privilege escalation vulnerabilities have also been prevalent in their administrative interfaces. The company has accumulated 13 CVEs to date, with several critical RCE vulnerabilities allowing unauthorized system access. No major public security incidents have been documented, though the consistent pattern of vulnerabilities suggests potential weaknesses in their secure development lifecycle. Their security posture appears reactive rather than proactive, with patches typically issued after vulnerabilities are disclosed.