CVE-2024-48238

MEDIUM CVSS: 4.7 Published: 2024-10-25 Modified: 2026-06-17

Description

WTCMS 1.0 is vulnerable to SQL Injection in the edit_post method of /Admin\Controller\NavControl.class.php via the parentid parameter.

Affected Platforms

Wtcms Project Wtcms

Weakness Type

CWE-89

References

https://github.com/taosir/wtcms/issues/14