Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 17/04/2024 Updated: 18/04/2024

A cross-site scripting (XSS) vulnerability in the Settings section of WonderCMS v3.4.3 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload injected into the PAGE TITLE parameter under the Current Page module.

XSS in WonderCMS 343 (SETTINGS -> CURRENT PAGE) Software link: WonderCMS 343 [wwwwondercmscom/download] @author: Antonio Díaz Description: Cross-site scripting (XSS) vulnerability in CURRENT PAGE of the SETTINGS section of WonderCMS 343 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into several fields: �

https://github.com/adiapera/xss_current_page_wondercms_3.4.3 https://nvd.nist.gov https://github.com/adiapera/xss_current_page_wondercms_3.4.3

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2024-32338

Vulnerability Summary

Github Repositories

References

Vulmon Search

About

Products

Connect