Description
Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component.
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Metasploit 1 module
-
WonderCMS Remote Code Execution
exploit/multi/http/wondercms_rce
Exploit-DB 1
- WonderCMS 3.4.2 - Remote Code Execution (RCE) EDB-52271 · remote · Apr 22, 2025
GitHub 14 repositories · most starred shown
-
prodigiousMind/CVE-2023-41425 ★ 27 · Nov 5, 2023
WonderCMS Authenticated RCE - CVE-2023-41425
-
Tea-On/CVE-2023-41425-RCE-WonderCMS-4.3.2 ★ 8 · Jul 1, 2025
Automates creation and hosting of a JavaScript XSS payload to install a malicious theme module, triggering a reverse shell via Remote Code Execution in WonderCMS. This tool uses PentestMonkey's PHP r…
-
duck-sec/CVE-2023-41425 ★ 3 · Oct 2, 2024
CVE-2023-41425 (Wonder CMS XSS to RCE) exploit which serves required scripts locally. Good if you're lost at sea and have found a problem with your bike.
-
thefizzyfish/CVE-2023-41425-wonderCMS_RCE ★ 3 · Aug 27, 2024
CVE-2023-41425 - Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component.
-
xpltive/CVE-2023-41425 ★ 1 · Dec 22, 2024
WonderCMS v3.2.0 - v3.4.2 XSS to RCE exploit
-
Diegomjx/CVE-2023-41425-WonderCMS-Authenticated-RCE ★ 1 · Nov 24, 2024
Xss injection, WonderCMS 3.2.0 -3.4.2
-
Raffli-Dev/CVE-2023-41425 ★ 1 · Sep 3, 2024
-
charlesgargasson/CVE-2023-41425 ★ 1 · Aug 11, 2024
Wonder CMS RCE (XSS)
-
Twappz/CVE-2023-41425 ★ 0 · Sep 21, 2024
WonderCMS RCE CVE-2023-41425
-
SpycioKon/CVE-2023-41425 ★ 0 · Aug 22, 2024
Research
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.