CVE-2019-14240

HIGH 8.1CVE-2019-14240 · Published 23/07/2019 · updated 17/06/2026

In short

CVE-2019-14240 is a HIGH (CVSS 8.1) vulnerability affecting wcms (wcms).
Chance of exploitation in the next 30 days (EPSS): 0.84%, higher than 58.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
wcms wcms	`= 0.3.2`	No fix yet

WCMS v0.3.2 has a CSRF vulnerability, with resultant directory traversal, to modify index.html via the /wex/html.php?finish=../index.html URI.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

= 0.3.2

No fix yet

More vulnerabilities in wcms

See all →