CVE-2025-3123

A vulnerability, which was classified as critical, has been found in WonderCMS 3.5.0. Affected by this issue is the function installUpdateModuleAction of the component Theme Installation/Plugin Installation. The manipulation leads to unrestricted upload. The attack may be launched remotely. The...

CVE-2025-3123 WonderCMS Theme Installation/Plugin Installation installUpdateModuleAction unrestricted upload

A vulnerability, which was classified as critical, has been found in WonderCMS 3.5.0. Affected by this issue is the function installUpdateModuleAction of the component Theme Installation/Plugin Installation. The manipulation leads to unrestricted upload. The attack may be launched remotely. The...

CVE-2025-3123

WonderCMS 3.5.0 is affected by CVE-2025-3123 due to an issue in installUpdateModuleAction within Theme Installation/Plugin Installation that allows unrestricted upload. The attack can be remotely triggered; the exploit has been publicly disclosed, though the vulnerability’s existence is disputed....