medium5.4Public exploit code
CVE-2020-29233
WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the Page description component.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WonderCMS 3.1.3 - 'content' Persistent Cross-Site Scripting2020-11-20 · webapps · php · Verified
Impact
WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the Page description component. This vulnerability can allow an attacker to inject the XSS payload in the Page description and each time any user will visits the website, the XSS triggers and attacker can steal the cookie according to the crafted payload.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wondercms | Wondercms | Version 3.1.3 |