Lucene search
+L

4 matches found

CNVD
CNVD
•added 2024/04/22 12:00 a.m.•40 views

WonderCMS HOW TO page cross-site scripting vulnerability

WonderCMS is an open source PHP-based content management system CMS. A cross-site scripting vulnerability exists in WonderCMS v3.4.3, which stems from the lack of effective filtering and escaping of user-supplied data on the HOW TO page, and can be exploited by an attacker to steal the victim's...

6.1CVSS6.3AI score0.00404EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/17 12:00 a.m.•7 views

CVE-2024-32339: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the HOW TO page of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into any of the parameters...

6.1CVSS6.1AI score0.00404EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2024/04/17 12:00 a.m.•18 views

WonderCMS security vulnerabilities

WonderCMS is an open source PHP-based content management system CMS. A cross-site scripting vulnerability exists in WonderCMS v3.4.3, which stems from the lack of effective filtering and escaping of user-supplied data on the HOW TO page, and can be exploited by an attacker to steal the victim's...

6.1CVSS6.4AI score0.00404EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/04/17 12:00 a.m.•20 views

PT-2024-24517 · Wondercms · Wondercms

Name of the Vulnerable Software and Affected Versions: WonderCMS version 3.4.3 Description: Multiple cross-site scripting XSS vulnerabilities in the HOW TO page of WonderCMS allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into any of the parameters...

6.1CVSS6.2AI score0.00404EPSS
SaveExploits1References7
Rows per page
Query Builder