CVE-2017-7951

High

Published: 21/04/2017(UTC)Translated: 15/06/2026(UTC)NVD NIST

Summary

WonderCMS before 2.0.3 is vulnerable to CSRF due to a lack of a token in an unspecified context.

Risk Assessment

A CSRF attack could allow an attacker to perform unauthorized actions on behalf of an authenticated user, potentially leading to serious security breaches.

Recommendation

It is recommended to upgrade WonderCMS to version 2.0.3 or later to mitigate this vulnerability.

Other vulnerabilities in WonderCMS

CVE-2020-29247Medium
WonderCMS 3.1.3 is vulnerable to cross-site scripting (XSS) in the Admin Panel. An attacker can inject a malicious JavaScript payload in the Page keywords field, which triggers on every visit to the website, allowing theft of session cookies.

Original NVD description (English source)

WonderCMS before 2.0.3 has CSRF because of lack of a token in an unspecified context.