Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2024-41304

An arbitrary file upload vulnerability in the uploadFileAction() function of WonderCMS v3.4.3 allows attackers to execute arbitrary code via a crafted SVG file.