CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

NVD•added 2024/03/05 5:15 p.m.•23 views

CVE-2024-27561

A Server-Side Request Forgery SSRF in the installUpdateThemePluginAction function of WonderCMS v3.1.3 allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the installThemePlugin parameter...

9.1CVSS6.9AI score0.00585EPSS

SaveExploits1References1

CVE•added 2024/03/05 12:00 a.m.•87 views

CVE-2024-27561

WonderCMS v3.1.3 is vulnerable to a Server-Side Request Forgery (SSRF) in the installUpdateThemePluginAction function. Attackers can exploit this by injecting crafted URLs into the installThemePlugin parameter, forcing the application to make arbitrary requests. As a temporary workaround, it is r...

9.1CVSS7.2AI score0.00585EPSS

SaveExploits1References1Affected Software1

OSV•added 2024/03/05 12:00 a.m.•16 views

CVE-2024-27561

9.1CVSS7.2AI score

SaveExploits0References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by