WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the Admin Panel. An attacker can inject the XSS payload in Page keywords and each time any user will visit the website, the XSS triggers, and the attacker can able to steal the cookie according to the crafted payload.
References
| Link | Resource |
|---|---|
| http://wondercms.com | Product Vendor Advisory |
| https://systemweakness.com/cve-2020-29247-wondercms-3-1-3-page-persistent-cross-site-scripting-3dd2bb210beb | Exploit Third Party Advisory |
| https://www.exploit-db.com/exploits/49102 | Exploit Third Party Advisory VDB Entry |
| http://wondercms.com | Product Vendor Advisory |
| https://systemweakness.com/cve-2020-29247-wondercms-3-1-3-page-persistent-cross-site-scripting-3dd2bb210beb | Exploit Third Party Advisory |
| https://www.exploit-db.com/exploits/49102 | Exploit Third Party Advisory VDB Entry |
Configurations
History
21 Nov 2024, 05:23
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://wondercms.com - Product, Vendor Advisory | |
| References | () https://systemweakness.com/cve-2020-29247-wondercms-3-1-3-page-persistent-cross-site-scripting-3dd2bb210beb - Exploit, Third Party Advisory | |
| References | () https://www.exploit-db.com/exploits/49102 - Exploit, Third Party Advisory, VDB Entry |
Information
Published : 2020-12-24 20:15
Updated : 2024-11-21 05:23
NVD link : CVE-2020-29247
Mitre link : CVE-2020-29247
CVE.ORG link : CVE-2020-29247
JSON object : View
Products Affected
wondercms
- wondercms
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')