CVE-2019-10646: Wolfcms Wolf CMS

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

Wolf CMS v0.8.3.1 is affected by cross site scripting (XSS) in the module Add Snippet (/?/admin/snippet/add). This allows an attacker to insert arbitrary JavaScript as user input, which will be executed whenever the affected snippet is loaded.

Affected products

• Wolfcms Wolf CMS: version 0.8.3.1 only

Published 2019-03-30. Last modified 2026-06-17.