Threats affecting pkg:github/patrickdeanramos/WonderCMS-version-3.4.3-SVG-Stored-Cross-Site-Scripting

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.4	EPSS 0.4%	CVE-2024-41304WonderCMS-version-3.4.3-SVG-Stored-Cross-Site-Scripting · An Arbitrary File Upload Medium5.4EPSS 0.4%2024-07-30CVE Database V5CVE-2024-41304 An arbitrary file upload vulnerability in the uploadFileAction() function of WonderCMS v3.4.3 allows attackers to execute arbitrary code via a crafted SVG file. EPSS 0.4%Vulnerability CWE-94	CVE Database V5	2024-07-30

Page 1 of 1