| Package | Affected versions | Patched versions |
|---|---|---|
| wondercms | = 2.4.0 |
WonderCMS version 2.4.0 contains a Stored Cross-Site Scripting on File Upload through SVG vulnerability in uploadFileAction(), 'svg' => 'image/svg+xml' that can result in An attacker can execute arbitrary script on an unsuspecting user's browser. This attack appear to be exploitable via Crafted SVG File.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free