CVE-2022-43332

A cross-site scripting (XSS) vulnerability in Wondercms v3.3.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Site title field of the Configuration Panel.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2022-11-17

Last modified

2025-04-29

Weaknesses

CWE-79

Affected products

• Wondercms (Wondercms)

References

• https://github.com/maikroservice/CVE-2022-43332