Lucene search
+L

4 matches found

CNVD
CNVD
•added 2024/04/22 12:00 a.m.•37 views

WonderCMS HOW TO page cross-site scripting vulnerability

WonderCMS is an open source PHP-based content management system CMS. A cross-site scripting vulnerability exists in WonderCMS v3.4.3, which stems from the lack of effective filtering and escaping of user-supplied data on the HOW TO page, and can be exploited by an attacker to steal the victim's...

6.1CVSS6.3AI score0.00404EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/04/17 12:00 a.m.•14 views

WonderCMS 安全漏洞

WonderCMS is an open source PHP-based content management system CMS. A cross-site scripting vulnerability exists in WonderCMS v3.4.3, which stems from the lack of effective filtering and escaping of user-supplied data on the HOW TO page, and can be exploited by an attacker to steal the victim's...

6.1CVSS6.4AI score0.00404EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2024/04/17 12:00 a.m.•15 views

PT-2024-24517 · Wondercms · Wondercms

Name of the Vulnerable Software and Affected Versions: WonderCMS version 3.4.3 Description: Multiple cross-site scripting XSS vulnerabilities in the HOW TO page of WonderCMS allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into any of the parameters...

6.1CVSS6.2AI score0.00404EPSS
SaveExploits1References7
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/04/17 12:00 a.m.•2 views

CVE-2024-32339: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in the HOW TO page of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into any of the parameters...

6.1CVSS6.1AI score0.00404EPSS
SaveExploits1References2
Rows per page
Query Builder