CVE-2023-41425

MEDIUM 6.1CVE-2023-41425 · Published 07/11/2023 · updated 09/07/2026

In short

CVE-2023-41425 is a MEDIUM (CVSS 6.1) vulnerability affecting wondercms (wondercms).
Chance of exploitation in the next 30 days (EPSS): 54.3%, higher than 99.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
wondercms wondercms	`≥ 3.2.0, ≤ 3.4.2`	No fix yet

Description

Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component.

References

gist.github.com/prodigiousMind/fc69a79629c4ba9ee88a7ad526043413 · Exploit
packetstorm.news/files/id/190575
exploit-db.com/exploits/52271

More vulnerabilities in wondercms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

wondercms

≥ 3.2.0, ≤ 3.4.2

No fix yet

More vulnerabilities in wondercms

See all →