What’s Vulnerable › Vulnerabilities

CVE-2023-41425

• Severity: medium (CVSS 6.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 54.3% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2023-11-07 · updated 2026-07-09
• Weakness: CWE-79

Description

Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component.

Affected products

• WonderCMS: from 3.2.0 through 3.4.2

References

• https://gist.github.com/prodigiousMind/fc69a79629c4ba9ee88a7ad526043413
• https://gist.github.com/prodigiousMind/fc69a79629c4ba9ee88a7ad526043413
• https://packetstorm.news/files/id/190575/
• https://www.exploit-db.com/exploits/52271

Get alerted when CVE-2023-41425 or the next vulnerability affects your stack