CVE-2024-32746

A cross-site scripting XSS vulnerability in the Settings section of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the MENU parameter under the Menu module...

CVE-2024-32746

A cross-site scripting (XSS) vulnerability exists in WonderCMS v3.4.3 within the Settings section. The flaw is caused by a lack of effective filtering and escaping of user-supplied data in the MENU parameter under the Menu module . An attacker can exploit this by injecting a crafted payload to ex...

CVE-2024-32746

A cross-site scripting XSS vulnerability in the Settings section of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the MENU parameter under the Menu module...