GHSA-qc3r-v7fc-24xc: WonderCMS before 3.7.0 Unverified Password Change via saveAction
WonderCMS before 3.7.0 contains an unverified password change vulnerability in the saveAction functionality that allows an authenticated attacker to change the administrator password without re-authentication. Attackers can exploit this missing re-verification check during password changes to bypass re-authentication controls and maintain or escalate unauthorized access to the administrative account.
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker must already be authenticated and have the high privileges needed to access the password-change functionality. The issue does not describe unauthenticated exploitation.
Which versions need to be remediated?
WonderCMS versions before 3.7.0 are affected. Upgrading to version 3.7.0 or later addresses the affected version range.
What is the practical impact of exploitation?
An authenticated attacker can change the administrator password without being re-authenticated. This can let them retain or escalate control of the administrative account.