← Back to CVE List

CVE-2024-41304

Published: 2024-07-30T18:15Z
Last Modified: 2025-04-11T15:14Z
Source: MITRE CVE List
License: MITRE-CVE-TOS
An arbitrary file upload vulnerability in the uploadFileAction() function of WonderCMS v3.4.3 allows attackers to execute arbitrary code via a crafted SVG file. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt