Today > vulnerabilities - You can now download lists of IOCs here!

CVE-2024-41305

July 30, 2024, 6:15 p.m.

Product(s) Impacted

WonderCMS

3.4.3

Description

A Server-Side Request Forgery (SSRF) in the Plugins Page of WonderCMS v3.4.3 allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the pluginThemeUrl parameter.

Weaknesses

Date

Published: July 30, 2024, 6:15 p.m.

Last Modified: July 30, 2024, 6:15 p.m.

Status : Received

CVE has been recently published to the CVE List and has been received by the NVD.

More info

Source

cve@mitre.org

References

https://github.com/ cve@mitre.org