CoreCVE
Back

MEDIUM

WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the Page description component

Published Dec 30, 2020

Description

WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the Page description component. This vulnerability can allow an attacker to inject the XSS payload in the Page description and each time any user will visits the website, the XSS triggers and attacker can steal the cookie according to the crafted payload.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (2)

Change history (0)

No recorded changes yet.

Sources
CVE.org / MITRE
Status PUBLISHED
Assigner mitre
Published Dec 30, 2020
Updated Aug 4, 2024
Reserved Nov 27, 2020
Link CVE-2020-29233
CISA Vulnrichment
Updated n/a
NVD
Status Modified
Modified Jun 17, 2026
Link CVE-2020-29233
Red Hat
Severity n/a
Public date n/a
Links CVE-2020-29233
ENISA EUVD
Assigner mitre
Published Dec 30, 2020
Updated Aug 4, 2024
Exploited since n/a
Link EUVD-2020-21612
EUVD-2020-21612