PT-2026-93807

Name of the Vulnerable Software and Affected Versions WuzhiCMS versions prior to 4.1.1 Description A server-side request forgery SSRF exists in the Remote Image Fetch component. This occurs when the ckditor::saveRemote function in the coreframe/app/attachment/index.php file improperly handles the...

CVE-2020-20124

Wuzhi CMS v4.1.0 contains a remote code execution RCE vulnerability in \attachment\admin\index.php...