CVE-2025-25916

CVE-2025-25916 affects wuzhicms v4.1.0. The vulnerability is a Cross Site Scripting (XSS) in the del function of coreframe/app/member/admin/group.php caused by insufficient input filtering. This can allow an attacker-controlled callback parameter to inject scripts, potentially executing in the vi...