CVE-2024-41305

2024-07-3000:00:00

mitre

github.com

security vulnerability

ssrf

wondercms

AI Score

7.3

Confidence

High

EPSS

Percentile

13.9%

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

A Server-Side Request Forgery (SSRF) in the Plugins Page of WonderCMS v3.4.3 allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the pluginThemeUrl parameter.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:wondercms:wondercms:3.4.3:*:*:*:*:*:*:*"
    ],
    "vendor": "wondercms",
    "product": "wondercms",
    "versions": [
      {
        "status": "affected",
        "version": "3.4.3"
      }
    ],
    "defaultStatus": "unknown"
  }
]