Lucene search
+L

4 matches found

CNVD
CNVD
•added 2024/03/08 12:00 a.m.•16 views

WonderCMS installUpdateThemePluginAction Function Server Request Forgery Vulnerability

WonderCMS is an open source PHP-based content management system CMS. A server request forgery vulnerability exists in the WonderCMS installUpdateThemePluginAction function, which can be exploited by an attacker to conduct an SSRF attack, thereby forcing the application to make arbitrary requests...

9.1CVSS6.9AI score0.00585EPSS
SaveExploits1References1
Rows per page
Query Builder