Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 17/04/2024 Updated: 18/04/2024

A cross-site scripting (XSS) vulnerability in the Settings section of WonderCMS v3.4.3 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload injected into the WEBSITE TITLE parameter under the Menu module.

XSS in WonderCMS 343 (SETTINGS -> MENU) Software link: WonderCMS 343 [wwwwondercmscom/download] @author: Antonio Díaz Description: Cross-site scripting (XSS) vulnerability in MENU of the SETTINGS section of WonderCMS 343 allow attackers to execute arbitrary web scripts or HTML via a crafted payload injected into two fields: 'WEBSITE TITLE

https://github.com/adiapera/xss_menu_page_wondercms_3.4.3 https://nvd.nist.gov https://github.com/adiapera/xss_menu_page_wondercms_3.4.3

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2024-32340

Vulnerability Summary

Github Repositories

References

Vulmon Search

About

Products

Connect