CVE-2023-41425: Wondercms

Medium severity, CVSS 6.1. EPSS: 54.3% chance of exploitation in the next 30 days.

Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component.

Affected products

• Wondercms Wondercms: from 3.2.0, up to and including 3.4.2

Published 2023-11-07. Last modified 2026-07-09.