Cross-site scripting in Wondercms
CVSS score
6.1
EPSS probability
%54.3
Risk score
3.3
Published
2 y ago
Public Exploits · GitHub and Metasploit Intelligence
This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.
Xss injection, WonderCMS 3.2.0 -3.4.2
Automates creation and hosting of a JavaScript XSS payload to install a malicious theme module, triggering a reverse shell via Remote Code Execution in WonderCMS. This tool uses PentestMonkey's PHP reverse shell script as the payload
CVE-2023-41425 Refurbish
WonderCMS Authenticated RCE - CVE-2023-41425
CVE-2023-41425 (XSS to RCE, Wonder CMS 3.2.0 <= 3.4.2)
Writing one because the one I found isn't working
CVE-2023-41425 - Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component.
WonderCMS 3.4.2 - Remote Code Execution (RCE)
https://gist.github.com/prodigiousMind/fc69a79629c4ba9ee88a7ad526043413
Similar Vulnerabilities
Get this vulnerability through the API
Affected products, version ranges, exploitation status and patch information in a single request, with a free key.
curl -H "x-api-key: $DAYBREACH_API_KEY" \ "https://api.daybreach.dev/api/v1/intel/cves/CVE-2023-41425"