← Back to browse · API

CVE-2023-41425

Severity
MEDIUM
CVSS
6.1
EPSS
0.54026
Risk score
43.31
CISA KEV
No
PoC
No
Published
2023-11-07
Modified
2026-07-09
First seen
2026-08-07
Aliases
EUVD-2023-45925, GHSA-58RR-37RR-R6H5
Products
n/a:n/a n/a
Sources
euvd EUVD-2023-45925

Description

Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component.

References