Threat database

2 threats

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	4.8	EPSS 0.3%	CVE-2024-48239wtcms · Cross-site Scripting Medium4.8EPSS 0.3%2024-10-25CVE Database V5CVE-2024-48239 An issue was discovered in WTCMS 1.0. In the plupload method in \AssetController.class.php, the app parameters aren't processed, resulting in Cross Site Scripting (XSS). EPSS 0.3%Vulnerability CWE-79	CVE Database V5	2024-10-25
Medium	4.7	EPSS 0.3%	CVE-2024-48238wtcms · SQL Injection Medium4.7EPSS 0.3%2024-10-25CVE Database V5CVE-2024-48238 WTCMS 1.0 is vulnerable to SQL Injection in the edit_post method of /Admin\Controller\NavControl.class.php via the parentid parameter. EPSS 0.3%Vulnerability CWE-89	CVE Database V5	2024-10-25

Page 1 of 1