| |
Vulnerability CVE-2024-27563
Published: 2024-03-05
| Description: |
A Server-Side Request Forgery (SSRF) in the getFileFromRepo function of WonderCMS v3.1.3 allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the pluginThemeUrl parameter. |
References: |
https://github.com/zer0yu/CVE_Request/blob/master/WonderCMS/wondercms_pluginThemeUrl.md
|
|
|
Copyright 2026, cxsecurity.com
|
|
|
