CVE-2022-1753

Name of the Vulnerable Software and Affected Versions WoWonder (affected versions not specified)

Description A critical vulnerability was found in WoWonder, affecting the file /requests.php, which handles group messages. The manipulation of the group id argument allows posting messages in other groups. This attack can be launched remotely and may require authentication. A video explaining the attack has been publicly disclosed.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.