Cross-Site Scripting Vulnerability in WonderCMS by WonderCMS
CVE-2024-32338

Currently unrated

Key Information:

Vendor: WonderCMS
Status: WonderCMS
Vendor: CVE Published:; 17 April 2024

What is CVE-2024-32338?

A cross-site scripting vulnerability present in the Settings section of WonderCMS allows attackers to inject malicious scripts through a specifically crafted payload in the PAGE TITLE parameter under the Current Page module. This flaw could enable unauthorized users to execute arbitrary web scripts or HTML, potentially compromising the integrity of a site and impacting end-users.

References

https://github.com/adiapera/xss_current_page_wondercms_3.4.3

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Apr 17, 2024
Vulnerability Reserved
Apr 12, 2024