CVE-2019-9108

CVE-2019-9108 describes a cross-site scripting vulnerability in WUZHI CMS 4.1.0, exploitable via index.php?m=core&f=map&v=baidumap&x=[XSS]&y=[XSS] that leads to script injection through the x and y parameters to coreframe/app/core/map.php. All connected sources consistently identify a generic XSS...