CVE-2020-29233 - CVE House
Back to Database
Status published Medium CVE-2020-29233

WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the...

Vulnerability Description

WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the Page description component. This vulnerability can allow an attacker to inject the XSS payload in the Page description and each time any user will visits the website, the XSS triggers and attacker can steal the cookie according to the crafted payload.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-29233

Credits & Attribution

No credits recorded in the NVD database.

References

More from wondercms

View All →
CVE-2024-58305
WonderCMS 4.3.2 Cross-Site Scripting Remote Code Execution via Module Installation
High 8.6
CVE-2022-43332
A cross-site scripting (XSS) vulnerability in Wondercms v3.3.4 allows attackers...
Unknown 0
CVE-2020-35314
A remote code execution vulnerability in the installUpdateThemePluginAction function in...
Critical 9.8
CVE-2020-35313
A server-side request forgery (SSRF) vulnerability in the addCustomThemePluginRepository function...
Critical 9.8
CVE-2020-29469
WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the...
Medium 5.4

Affected Vendor

Affected Software

wondercms
Vulnerable Versions:
3.1.3

Timeline

Official Publish: December 30th, 2020
Last Modified: August 4th, 2024
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.