CVE-2020-18654

Cross Site Scripting XSS in Wuzhi CMS v4.1.0 allows remote attackers to execute arbitrary code via the "Title" parameter in the component "/coreframe/app/guestbook/myissue.php"...

CVE-2020-18654

creationtimestamp| type| source ---|---|--- 2021-06-22 20:16:26+00:00| seen| https://t.me/cibsecurity/25615...

CVE-2020-18654

Cross Site Scripting XSS in Wuzhi CMS v4.1.0 allows remote attackers to execute arbitrary code via the "Title" parameter in the component "/coreframe/app/guestbook/myissue.php"...

CVE-2020-18654

CVE-2020-18654 is a Cross Site Scripting (XSS) vulnerability in Wuzhi CMS v4.1.0. The issue allows remote attackers to execute arbitrary code via the Title parameter in the component /coreframe/app/guestbook/myissue.php. The connected documents confirm the affected product/version and the vulnera...