CVE-2023-31689

critical · 9.8

In Wcms 0.3.2, an attacker can send a crafted request from a vulnerable web application backend server /wcms/wex/html.php via the finish parameter and the textAreaCode parameter. It can write arbitrary strings into custom file names and upload any files, and write malicious code to execute scripts to trigger command execution.

9.8

CVSS

20.2%

EPSS (exploit prob.)

97th

EPSS percentile

2023-05-22

Published

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-434

Affected products

Vendor	Product	Affected versions
wcms	wcms	0.3.2

Check a specific version with /api/v1/cve/match.

References

https://github.com/vedees/wcms/issues/15
https://github.com/vedees/wcms/issues/15

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2023-31689