Cross-Site Scripting Vulnerability in WonderCMS v3.4.3
CVE-2024-32745

Currently unrated

Key Information:

Vendor

WonderCMS

Status
WonderCMS
Vendor
CVE Published:
17 April 2024

What is CVE-2024-32745?

A cross-site scripting (XSS) vulnerability has been identified in the Settings section of WonderCMS version 3.4.3. This flaw enables attackers to inject and execute arbitrary web scripts or HTML by manipulating the PAGE DESCRIPTION parameter within the CURRENT PAGE module. Such exploitation can lead to unauthorized access and compromise of user data, making it essential for users of this version to implement security best practices and apply the necessary updates.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/adiapera/xss_current_page_wondercms_3.4.3

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.