4 matches found
CVE-2024-48239
An issue was discovered in WTCMS 1.0. In the plupload method in \AssetController.class.php, the app parameters aren't processed, resulting in Cross Site Scripting XSS...
4.8CVSS0.00235EPSS
SaveExploits1References1
CVE-2024-48239
An issue was discovered in WTCMS 1.0. In the plupload method in \AssetController.class.php, the app parameters aren't processed, resulting in Cross Site Scripting XSS...
4.8CVSS5.8AI score0.00235EPSS
SaveExploits1References1
wtcms 安全漏洞
wtcms is a ThinkPHP-based content management system CMS. A cross-site scripting vulnerability exists in version 1.0 of wtcms, which stems from unprocessed application parameters in the plupload method in the file AssetController.class.php, and can be exploited by an attacker to execute arbitrary...
4.8CVSS5.9AI score0.00235EPSS
SaveExploits1References1
20