medium6.1Public exploit code
CVE-2023-41425
Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the i…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WonderCMS 3.4.2 - Remote Code Execution (RCE)2025-04-22 · remote · php
Impact
Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wondercms | Wondercms | from 3.2.0 through 3.4.2 |