Sploitus

CVE-2023-41425

15 known exploits for CVE-2023-41425

Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component.

Affected products
Wondercms
Wondercms
≤ 3.4.2
CVSS 3.1
6.1 MEDIUM
EPSS
54.0% (99th percentile)
Weakness
CWE-79
NVD status
Modified
Published
2023-11-07
CVE-2023-41425 at NVD
Authoritative description, scoring and affected products

15 known exploits for CVE-2023-41425

Proof-of-concept code and exploit modules indexed by Sploitus

📄 WonderCMS 3.4.2 Shell Upload
2026-03-04 indoushkaPACKETSTORMPHP
Exploit for Cross-site Scripting in Wondercms
2025-07-01 Tea-OnGITHUB
📄 WonderCMS 3.x Remote Code Execution
2025-05-01 msutovsky-r7, Milad KarimiPACKETSTORMRuby
WonderCMS 3.4.2 - Remote Code Execution (RCE)
2025-04-22 Milad karimiEXPLOITDBPython
📄 WonderCMS 3.4.2 Cross Site Scripting / Code Execution
2025-04-21 Milad KarimiPACKETSTORMPython
Exploit for Cross-site Scripting in Wondercms
2024-12-22 xpltiveGITHUB
Exploit for Cross-site Scripting in Wondercms
2024-11-30 0x0d3adGITHUB
Exploit for Cross-site Scripting in Wondercms
2024-11-24 DiegomjxGITHUB
Exploit for Cross-site Scripting in Wondercms
2024-10-30 h3athenGITHUB
Exploit for Cross-site Scripting in Wondercms
2024-10-02 duck-secGITHUB
Exploit for Cross-site Scripting in Wondercms
2024-09-03 Raffli-DevGITHUB
Exploit for Cross-site Scripting in Wondercms
2024-08-27 thefizzyfishGITHUB
Exploit for Cross-site Scripting in Wondercms
2024-08-11 charlesgargassonGITHUB
WonderCMS Remote Code Execution
2023-11-07 msutovsky-r7, Milad "Ex3ptionaL" KarimiMETASPLOITRuby
Exploit for Cross-site Scripting in Wondercms
2023-11-05 prodigiousMindGITHUB