CVE-2025-25916

The wuzhicms content management system (version v4.1.0 ) contains a Cross-Site Scripting (XSS) vulnerability within the del function located in the \coreframe\app\member\admin\group.php file. This vulnerability allows an attacker to execute malicious scripts in a victim's browser. While no patch ...