Cross-Site Scripting Vulnerability in WonderCMS v3.4.3
CVE-2024-32745
Currently unrated
Key Information:
What is CVE-2024-32745?
A cross-site scripting (XSS) vulnerability has been identified in the Settings section of WonderCMS version 3.4.3. This flaw enables attackers to inject and execute arbitrary web scripts or HTML by manipulating the PAGE DESCRIPTION parameter within the CURRENT PAGE module. Such exploitation can lead to unauthorized access and compromise of user data, making it essential for users of this version to implement security best practices and apply the necessary updates.