CVE-2017-14522

Summary

In WonderCMS 2.3.1, the application's input fields accept arbitrary user input resulting in execution of malicious JavaScript. NOTE: the vendor disputes this issue stating that this is a feature that enables only a logged in administrator to write execute JavaScript anywhere on their website

Affected Software

Weaknesses

• n/a

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

CVE Program Container

Additional References

• https://securitywarrior9.blogspot.in/2018/01/stored-xss-in-wonder-cms.html

References

• https://securitywarrior9.blogspot.in/2018/01/stored-xss-in-wonder-cms.html

• ←Previous
• Next→