CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

3 matches found

NVD•added 2024/03/05 5:15 p.m.•14 views

CVE-2024-27561

A Server-Side Request Forgery SSRF in the installUpdateThemePluginAction function of WonderCMS v3.1.3 allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the installThemePlugin parameter...

9.1CVSS6.9AI score0.00585EPSS

SaveExploits1References1

CVE•added 2024/03/05 12:0 a.m.•70 views

CVE-2024-27561

WonderCMS (version 3.1.3) is affected by a Server-Side Request Forgery (SSRF) in the installUpdateThemePluginAction function. The vulnerability allows an attacker to coerce the application into making arbitrary outbound requests by injecting crafted URLs into the installThemePlugin parameter. Pub...

9.1CVSS7.2AI score0.00585EPSS

SaveExploits1References1Affected Software1

OSV•added 2024/03/05 12:0 a.m.•13 views

CVE-2024-27561

9.1CVSS7.2AI score

SaveExploits0References3

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by