CVE-2022-36168

CVE-2022-36168 affects Wuzhicms 4.1.0, with a directory traversal flaw in /coreframe/app/attachment/admin/index.php. Root cause is improper path handling allowing unauthenticated access to restricted files (documented as a directory traversal vulnerability). The NVD entry lists a low severity (CV...