PT-2025-50972

Name of the Vulnerable Software and Affected Versions WonderCMS version 4.3.2 Description WonderCMS version 4.3.2 contains a cross-site scripting issue that allows attackers to inject malicious JavaScript through the module installation endpoint. An attacker can craft a specially designed XSS...

WonderCMS 跨站脚本漏洞

WonderCMS is an open source PHP-based content management system CMS from WonderCMS, Inc. A cross-site scripting vulnerability exists in WonderCMS version 4.3.2, which stems from the presence of cross-site scripting in the module installation endpoints, which could lead to the injection of malicio...

CVE-2024-58305: Improper Neutralization of Input During Web Page Generation

WonderCMS 4.3.2 contains a cross-site scripting vulnerability that allows attackers to inject malicious JavaScript through the module installation endpoint. Attackers can craft a specially designed XSS payload to install a reverse shell module and execute remote commands by tricking an...

EUVD-2019-15524

Malware in sbrugna...

EUVD-2020-21839

Malware in sbrugna...

EUVD-2017-6022

Malware in sbrugna...

EUVD-2011-5216

Malware in sbrugna...

EUVD-2020-21612

Malware in sbrugna...

EUVD-2018-1817

Malware in sbrugna...

EUVD-2017-16922

Malware in sbrugna...

EUVD-2018-6305

Malware in sbrugna...

EUVD-2018-18914

Malware in sbrugna...

EUVD-2020-21622

Malware in sbrugna...

EUVD-2024-30159

Malicious code in bioql PyPI...

EUVD-2021-29211

Malicious code in bioql PyPI...

EUVD-2025-9620

Malicious code in bioql PyPI...

EUVD-2022-46371

Malicious code in bioql PyPI...

CVE-2025-57055

WonderCMS 3.5.0 is vulnerable to Server-Side Request Forgery SSRF in the custom module installation functionality. An authenticated administrator can supply a malicious URL via the pluginThemeUrl POST parameter. The server fetches the provided URL using curlexec without sufficient validation,...

CVE-2025-57055

WonderCMS 3.5.0 is vulnerable to Server-Side Request Forgery SSRF in the custom module installation functionality. An authenticated administrator can supply a malicious URL via the pluginThemeUrl POST parameter. The server fetches the provided URL using curlexec without sufficient validation,...

CVE-2025-57055: Server-Side Request Forgery (SSRF)

WonderCMS 3.5.0 is vulnerable to Server-Side Request Forgery SSRF in the custom module installation functionality. An authenticated administrator can supply a malicious URL via the pluginThemeUrl POST parameter. The server fetches the provided URL using curlexec without sufficient validation,...