WolfCMS version 0.8.3.1 suffers from a cross site scripting vulnerability.
6481867aa8201641288a9e2ef99deea9a4fd7fe8d73b9ebcf9a9ab1c07ce587cDescription: WolfCMS v0.8.3.1 and before is vulnerable to cross site
scripting in User Add module for parameter Name.
Impacted URL is http://[your_webserver_ip]/wolfcms/?/admin/user/add
Payload used is "TestXSS><img src=x onmousover=alert(document.cookie)>
Further details: https://github.com/wolfcms/wolfcms/issues/683
Already requested for CVE, yet to receive it.
© 2024 Packet Storm. All rights reserved.
%7Cutmcsr%3D(direct)%7Cutmcmd%3D(none)){kind=small}
Follow us on Twitter
Follow us on Facebook
Subscribe to an RSS Feed