CVE-2024-48238

Published October 25th, 2024

View on NVD ↗

CVSS v3

4.7

MEDIUM

CVSS v2

N/A

Affected

1

PROJECT

Description

WTCMS 1.0 is vulnerable to SQL Injection in the edit_post method of /Admin\Controller\NavControl.class.php via the parentid parameter.

基于thinkphp的内容管理系统，可快速搭建个人博客、公司学校官网、新闻类站点。

GitHub

113