Skip to content
OpenAdvisories

Vendor

WonderCMS

2 known vulnerabilities.

Products

WonderCMS 1 2.6.0 and earlier 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2024-58305

    WonderCMS 4.3.2 Cross-Site Scripting Remote Code Execution via Module Installation

    WonderCMS 4.3.2 contains a cross-site scripting vulnerability that allows attackers to inject malicious JavaScript through the module installation endpoint. Attackers can craft a specially designed XSS payload to install a reverse shell module and execute rem…

    WonderCMS WonderCMS