CVE-2020-18654

Cross Site Scripting XSS in Wuzhi CMS v4.1.0 allows remote attackers to execute arbitrary code via the "Title" parameter in the component "/coreframe/app/guestbook/myissue.php"...

PT-2021-10195

Name of the Vulnerable Software and Affected Versions: Wuzhi CMS version 4.1.0 Description: The issue allows remote attackers to execute arbitrary code via the Title parameter in the "/coreframe/app/guestbook/myissue.php" API endpoint. This is a Cross Site Scripting XSS issue. Recommendations: Fo...

CVE-2020-18654: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in Wuzhi CMS v4.1.0 allows remote attackers to execute arbitrary code via the "Title" parameter in the component "/coreframe/app/guestbook/myissue.php"...

WUZHICMS coreframe\app\guestbook\myissue.php 存储型XSS漏洞

No description provided by source...