CVE-2024-58305
HIGHWonderCMS 4.3.2 - Stored Cross-Site Scripting via Module Installation Endpoint
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2024-58305. PoCs published by Anas Zakir.
AI-analyzed exploit summary This exploit leverages an XSS vulnerability in WonderCMS 4.3.2 to achieve remote code execution by tricking an admin into executing malicious JavaScript, which then installs a reverse shell module from a GitHub repository.
Description
WonderCMS 4.3.2 contains a cross-site scripting vulnerability that allows attackers to inject malicious JavaScript through the module installation endpoint. Attackers can craft a specially designed XSS payload to install a reverse shell module and execute remote commands by tricking an authenticated administrator into accessing a malicious link.
Exploits (1)
This exploit leverages an XSS vulnerability in WonderCMS 4.3.2 to achieve remote code execution by tricking an admin into executing malicious JavaScript, which then installs a reverse shell module from a GitHub repository.
References (4)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H