CVE-2024-27561
- Reference to the description:
- Description:
- A Server-Side Request Forgery (SSRF) in the installUpdateThemePluginAction function of WonderCMS v3.1.3 allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the installThemePlugin parameter.
- Last updated date:
- 01/21/2025
- Type:
- exploit
- Confidence:
- HIGH
- Date of publishing:
- 01/21/2025