module
WonderCMS Remote Code Execution
Disclosed | Created |
---|---|
2023-11-07 | 2025-05-01 |
Disclosed
2023-11-07
Created
2025-05-01
Description
This module exploits CVE-2023-41425, an authenticated file upload vulnerability affecting WonderCMS between 3.2.0 and 3.4.2.
Authors
msutovsky-r7
Milad "Ex3ptionaL" Karimi
Milad "Ex3ptionaL" Karimi
References
Module Options
To display the available options, load the module within the Metasploit console and run the commands ‘show options’ or ‘show advanced’:

NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.