VULNERABILITY INTELLIGENCE

CVE-2024-58305

CVSS score8.8 HIGH

EPSS probability0.43%

CISA KEVNot currently listed

Published2025-12-12

Last modified2026-10-27

Description

WonderCMS 4.3.2 contains a cross-site scripting vulnerability that allows attackers to inject malicious JavaScript through the module installation endpoint. Attackers can craft a specially designed XSS payload to install a reverse shell module and execute remote commands by tricking an authenticated administrator into accessing a malicious link.