CVE-2020-35314

A remote code execution vulnerability in the installUpdateThemePluginAction function in index.php in WonderCMS 3.1.3, allows remote attackers to uploa...

Description d'origine

La description telle que publiée par la source (souvent en anglais).

A remote code execution vulnerability in the installUpdateThemePluginAction function in index.php in WonderCMS 3.1.3, allows remote attackers to upload a custom plugin which can contain arbitrary code and obtain a webshell via the theme/plugin installer.

Source: OSV.dev (Open Source Vulnerabilities) NVD OSV

Références

package github.com
report packetstormsecurity.com
report zetc0de.github.io
report zetc0de.github.io