CVE-2025-25916

wuzhicms v4.1.0 has a Cross Site Scripting XSS vulnerability in del function in \coreframe\app\member\admin\group.php...

CVE-2024-48356

LyLme Spage =1.6.0 is vulnerable to SQL Injection via /admin/group.php...