WonderCMS 3.4.3
Approved changes feed: RSS · Atom
cpe:2.3:a:wondercms:wondercms:3.4.3:*:*:*:*:*:*:*
part: a version: 3.4.3 update: *
| Vendor | Wondercms (0662ffc5-32b5-5dde-87bb-37e881a45788) |
|---|---|
| Product | Wondercms (0877b2ee-e4a9-5f4c-ab49-b9b2fbb88185) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/robiso/wondercms |
purl2cpe | 2026-06-01 10:13:28.638345 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-41305 |
vulnerable | 2026-06-08 06:43:54.328307 |
Details available
A Server-Side Request Forgery (SSRF) in the Plugins Page of WonderCMS v3.4.3 allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the pluginThemeUrl parameter.
Published: 2024-07-30T00:00:00.000Z
Updated: 2024-08-02T04:46:52.073Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41304 |
vulnerable | 2026-06-08 06:43:54.327870 |
Details available
An arbitrary file upload vulnerability in the uploadFileAction() function of WonderCMS v3.4.3 allows attackers to execute arbitrary code via a crafted SVG file.
Published: 2024-07-30T00:00:00.000Z
Updated: 2024-08-23T15:20:48.730Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32746 |
vulnerable | 2026-06-08 06:37:23.774722 |
Details available
A cross-site scripting (XSS) vulnerability in the Settings section of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the MENU parameter under the Menu module.
Published: 2024-04-17T00:00:00.000Z
Updated: 2024-08-02T02:20:35.266Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32745 |
vulnerable | 2026-06-08 06:37:23.774284 |
Details available
A cross-site scripting (XSS) vulnerability in the Settings section of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the PAGE DESCRIPTION parameter under the CURRENT PAGE module.
Published: 2024-04-17T00:00:00.000Z
Updated: 2024-08-02T02:20:34.682Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32744 |
vulnerable | 2026-06-08 06:37:23.772034 |
Details available
A cross-site scripting (XSS) vulnerability in the Settings section of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the PAGE KEYWORDS parameter under the CURRENT PAGE module.
Published: 2024-04-17T00:00:00.000Z
Updated: 2024-08-02T02:20:35.284Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32743 |
vulnerable | 2026-06-08 06:37:23.771638 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32341 |
vulnerable | 2026-06-08 06:35:33.061275 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32340 |
vulnerable | 2026-06-08 06:35:33.060708 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32339 |
vulnerable | 2026-06-08 06:35:33.060392 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32338 |
vulnerable | 2026-06-08 06:35:33.059837 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-32337 |
vulnerable | 2026-06-08 06:35:33.057911 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.