Cross-Site Scripting Vulnerabilities in WonderCMS from Adiapera
CVE-2024-32339

Currently unrated

Key Information:

Vendor: WonderCMS
Status: WonderCMS
Vendor: CVE Published:; 17 April 2024

What is CVE-2024-32339?

WonderCMS version 3.4.3 is susceptible to multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities emerge from the HOW TO page, where attackers can exploit the injection of crafted payloads through various parameters. Successful exploitation enables the execution of arbitrary web scripts or HTML, posing significant risks to user data security and application integrity.

References

https://github.com/adiapera/xss_how_to_page_wondercms_3.4.3

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Apr 17, 2024
Vulnerability Reserved
Apr 12, 2024