CVE-2020-29469

2020-12-3015:15:12

Google

osv.dev

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.9%

JSON

WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the Menu component. This vulnerability can allow an attacker to inject the XSS payload in the Setting - Menu and each time any user will visits the website directory, the XSS triggers and attacker can steal the cookie according to the crafted payload.

CPENameOperatorVersion
wondercmseq2.5.2
wondercmseq3.1.3
wondercmseq3.1.1
wondercmseq1.1.0-beta
wondercmseq2.0.4
wondercmseq3.0.4
wondercmseq2.2.1
wondercmseq2.0.1
wondercmseq2.6.0
wondercmseq3.1.2

Name	Operator	Version
wondercms	eq	2.5.2
wondercms	eq	3.1.3
wondercms	eq	3.1.1
wondercms	eq	1.1.0-beta
wondercms	eq	2.0.4
wondercms	eq	3.0.4
wondercms	eq	2.2.1
wondercms	eq	2.0.1
wondercms	eq	2.6.0
wondercms	eq	3.1.2

Rows per page:

1-10 of 321

References

www.exploit-db.com/exploits/49164