A vulnerability classified as critical has been found in WonderCMS 3.4.3. This affects an unknown part of the component Plugins Page. The manipulation of the argument pluginThemeUrl leads to server-side request forgery.

This vulnerability is uniquely identified as CVE-2024-41305. Access to the local network is required for this attack to succeed. There is no exploit available.