CVE-2018-10391

CVE-2018-10391 affects WUZHI CMS 4.1.0. The issue is a cross-site scripting (XSS) vulnerability via the email parameter in the URL index.php?m=member&v=register. This allows injection of arbitrary HTML/JS in the vulnerable context. Connected sources confirm the affected component and the vulnerab...