2 matches found
CVE-2019-9110: Improper Neutralization of Input During Web Page Generation
XSS exists in WUZHI CMS 4.1.0 via index.php?m=content&f=postinfo&v=listing&setiframe=XSS to coreframe/app/content/postinfo.php...
6.1CVSS5.7AI score0.00853EPSS
SaveExploits1References2
CVE-2018-10313: Improper Neutralization of Input During Web Page Generation
WUZHI CMS 4.1.0 allows persistent XSS via the form%5Bqq10%5D parameter to the /index.php?m=member&f=index&v=profile&setiframe=1 URI...
5.4CVSS6AI score0.02117EPSS
SaveExploits5References2
20