Cross-Site Scripting Vulnerability in WonderCMS 3.1.3
CVE-2020-29247
4.8MEDIUM
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2020-29247?
WonderCMS 3.1.3 is susceptible to a cross-site scripting (XSS) vulnerability present in the Admin Panel. This flaw allows an attacker to inject malicious payloads into Page keywords. Subsequently, any user visiting the compromised page inadvertently executes the injected script, enabling the attacker to capture user cookies and conduct further malicious activities. It highlights the need for enhanced input validation and output encoding to protect against such threats.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.