Vulnerabilities (CVE)

Filtered by vendor Wondercms Subscribe
Filtered by product Wondercms
Total 23 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2014-8703 1 Wondercms 1 Wondercms 2024-02-04 4.3 MEDIUM 6.1 MEDIUM
Cross-site scripting (XSS) vulnerability in Wonder CMS 2014 allows remote attackers to inject arbitrary web script or HTML.
CVE-2014-8704 1 Wondercms 1 Wondercms 2024-02-04 7.5 HIGH 9.8 CRITICAL
Directory traversal vulnerability in index.php in Wonder CMS 2014 allows remote attackers to include and execute arbitrary local files via a crafted theme.
CVE-2011-5317 1 Wondercms 1 Wondercms 2024-02-04 4.3 MEDIUM N/A
Cross-site scripting (XSS) vulnerability in editText.php in WonderCMS before 0.4 allows remote attackers to inject arbitrary web script or HTML via the content parameter.