VULNERABILITY INTELLIGENCE

CVE-2019-14240

CVSS score8.1 HIGH

EPSS probability0.84%

CISA KEVNot currently listed

Published2019-07-23

Last modified2026-06-17

Description

WCMS v0.3.2 has a CSRF vulnerability, with resultant directory traversal, to modify index.html via the /wex/html.php?finish=../index.html URI.