Vulnerability Details CVE-2017-14523
WonderCMS 2.3.1 is vulnerable to an HTTP Host header injection attack. It uses user-entered values to redirect pages. NOTE: the vendor reports that exploitation is unlikely because the attack can only come from a local machine or from the administrator as a self attack
Exploit prediction scoring system (EPSS) score
EPSS Score 0.112
EPSS Ranking 93.2%
CVSS Severity
CVSS v3 Score 7.5
CVSS v2 Score 5.0
References