Description
WTCMS 1.0 is vulnerable to SQL Injection in the edit_post method of /Admin\Controller\NavControl.class.php via the parentid parameter.
Medium · 4.7
CVE-2024-48238
EUVD-2024-42965GHSA-fvm7-9wr5-2cgx
WTCMS 1.0 is vulnerable to SQL Injection in the edit_post method of /Admin\Controller\NavControl.class.php via the parentid parameter.
Published Oct 25, 2024 · Updated Oct 29, 2024 · Assigned by mitre