← Database

CVE-2021-42233

MEDIUM CVSS: 5.4 Published: 2022-05-23 Modified: 2026-06-17

Description

The Simple Blog plugin in Wondercms 3.4.1 is vulnerable to stored cross-site scripting (XSS) vulnerability. When any user opens a particular blog hosted on an attackers' site, XSS may occur.

Affected Platforms

Wondercms WondercmsSimple Blog Project Simple Blog

Weakness Type

CWE-79

References