medium4.7
CVE-2024-48238
WTCMS 1.0 is vulnerable to SQL Injection in the edit_post method of /Admin\Controller\NavControl.class.php via the parentid parameter.
Impact
WTCMS 1.0 is vulnerable to SQL Injection in the edit_post method of /Admin\Controller\NavControl.class.php via the parentid parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wtcms Project | Wtcms | Version 1.0 |