What is GHSA-h9fm-r36v-gmw8?

GHSA-h9fm-r36v-gmw8 is a security advisory published by GitHub Security Advisories with Medium severity. WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the Admin Panel. An attacker can...

Which CVE IDs does GHSA-h9fm-r36v-gmw8 cover?

GHSA-h9fm-r36v-gmw8 covers the following CVE IDs: CVE-2020-29247. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-h9fm-r36v-gmw8?

GHSA-h9fm-r36v-gmw8 has a CVSS v3 base score of 4.8, published by GitHub Security Advisories.

GHSA-h9fm-r36v-gmw8MediumCVSS 4.8

WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the Admin Panel. An attacker can...

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

July 5, 2026

🔗 CVE IDs covered (1)

CVE-2020-29247 →

📋 Description

WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the Admin Panel. An attacker can inject the XSS payload in Page keywords and each time any user will visit the website, the XSS triggers, and the attacker can able to steal the cookie according to the crafted payload.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2020-29247
https://systemweakness.com/cve-2020-29247-wondercms-3-1-3-page-persistent-cross-site-scripting-3dd2bb210beb
https://www.exploit-db.com/exploits/49102
http://wondercms.com
https://github.com/advisories/GHSA-h9fm-r36v-gmw8