CVE-2025-25916

wuzhicms v4.1.0 has a Cross Site Scripting XSS vulnerability in del function in \coreframe\app\member\admin\group.php...

CVE-2022-27431

Wuzhicms v4.1.0 was discovered to contain a SQL injection vulnerability via the groupid parameter at /coreframe/app/member/admin/group.php...

PT-2022-18423

Name of the Vulnerable Software and Affected Versions Wuzhicms version 4.1.0 Description A SQL injection issue was found in Wuzhicms via the groupid parameter at the "/coreframe/app/member/admin/group.php" API endpoint. Recommendations For Wuzhicms version 4.1.0, consider restricting access to th...

CVE-2022-27431: Improper Neutralization of Special Elements used in an SQL Command

Wuzhicms v4.1.0 was discovered to contain a SQL injection vulnerability via the groupid parameter at /coreframe/app/member/admin/group.php...