CVE-2024-32337

A cross-site scripting XSS vulnerability in the Settings section of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the ADMIN LOGIN URL parameter under the Security module...

CVE-2024-32337

WonderCMS version 3.4.3 contains a cross-site scripting (XSS) vulnerability in the Settings section. The flaw is caused by a lack of effective filtering and escaping of user-supplied data within the ADMIN LOGIN URL parameter located under the Security module . An attacker can exploit this by inje...