Wakyma vulnerabilities

Products

• Wakyma application web 5
• wakyma 4

Latest Wakyma CVEs

Newest publication first

1. CVE-2026-3024 Stored Cross-Site Scripting (XSS) vulnerability in the Wakyma application web

   Published 2026-03-16

   Medium·CVSS 4.8 EPSS 0.16%

   Stored Cross-Site Scripting (XSS) vulnerability in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/configuracion/agenda/modelo-formulario-evento'. A user with permission to create personalized accounts could exploit this vulnerability simply by creating...

2. CVE-2026-3023 Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma application web

   Published 2026-03-16

   Medium·CVSS 5.3 EPSS 0.38%

   Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/pets/print-tags'. This vulnerability could allow an authenticated user to alter a POST request to the affected endpoint for the purpose of injecting No...

3. CVE-2026-3022 Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma application web

   Published 2026-03-16

   High·CVSS 7.1 EPSS 0.25%

   Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/hospitalization/generate-hospitalization-summary'. This vulnerability could allow an authenticated user to alter a POST request to the affected endpoin...

4. CVE-2026-3021 Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma application web

   Published 2026-03-16

   High·CVSS 7.1 EPSS 0.25%

   Non-relational SQL injection vulnerability (NoSQLi) in the Wakyma web application, specifically in the endpoint 'vets.wakyma.com/centro/equipo/empleado'. This vulnerability could allow an authenticated user to alter a GET request to the affected endpoint for the purpose of inject...

5. CVE-2026-3020 Identity based authorization bypass vulnerability (IDOR) in the Wakyma application web

   Published 2026-03-16

   High·CVSS 8.6 EPSS 0.26%

   Identity based authorization bypass vulnerability (IDOR) that allows an attacker to modify the data of a legitimate user account, such as changing the victim's email address, validating the new email address, and requesting a new password. This could allow them to take complete c...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.