← All advisories

Medium severity4.7NVD Advisory· Published Oct 25, 2024· Updated Jun 17, 2026

CVE-2024-48238

CVE-2024-48238

Description

WTCMS 1.0 is vulnerable to SQL Injection in the edit_post method of /Admin\Controller\NavControl.class.php via the parentid parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

WTCMS/WTCMSdescription
Wtcms/WTCMSllm-fuzzy
Range: =1.0
Wtcms Project/Wtcms
cpe:2.3:a:wtcms_project:wtcms:1.0:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

1

github.com/taosir/wtcms/issues/14nvdExploitIssue TrackingThird Party Advisory

News mentions

0

No linked articles in our index yet.