Record summary

CVE-2022-43332 has a selected CVSS score of 6.1 (medium); EIP currently links 1 repository PoC.

Description

A cross-site scripting (XSS) vulnerability in Wondercms v3.3.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Site title field of the Configuration Panel.

Description source: CVE List

Exploitation context

Available material

Repository PoCs
1

CISA SSVC decision

ExploitationNone
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Apr 29, 2025 · Source: CVE List

Proofs of concept

1

Repository PoCs

GitHubmaikroservice/CVE-2022-43332Repository PoCby maikroserviceStars: 2Not analyzed1 file

742 B

GitHub

PoC details

References

2