CRITICAL

CVE-2020-35313

CVSS v3

9.8

CRITICAL

EPSS Score

13.1%

exploit probability

CISA KEV

No

known exploited

Exploitation

—

SSVC status

Description

A server-side request forgery (SSRF) vulnerability in the addCustomThemePluginRepository function in index.php in WonderCMS 3.1.3 allows remote attackers to execute arbitrary code via a crafted URL to the theme/plugin installer.

Technical details

Published
4/20/2021

Frequently asked questions

What is CVE-2020-35313?

A server-side request forgery (SSRF) vulnerability in the addCustomThemePluginRepository function in index.php in WonderCMS 3.1.3 allows remote attackers to execute arbitrary code via a crafted URL to the theme/plugin installer.

Is CVE-2020-35313 actively exploited?

Active exploitation of CVE-2020-35313 has not been confirmed. The EPSS score is 13.1%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2020-35313?

CVE-2020-35313 has a CVSS v3 base score of 9.8 (CRITICAL severity).

Is CVE-2020-35313 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.

Check an IPSearch CVEs

Other 2020 vulnerabilities worth triaging

Ranked by exploit probability (EPSS).

Back to CVE Database