4 matches found
CVE-2018-17426
WUZHI CMS 4.1.0 has stored XSS via the "Extension module" "SMS in station" field under the index.php?m=core URI...
5.4CVSS5.6AI score
SaveExploits0References1
CVE-2018-17426
WUZHI CMS 4.1.0 has stored XSS via the "Extension module" "SMS in station" field under the index.php?m=core URI...
5.4CVSS5.2AI score0.00875EPSS
SaveExploits1References1
CVE-2018-17426
WUZHI CMS 4.1.0 is affected by a stored XSS vulnerability in the Extension module, specifically the "SMS in station" field under index.php?m=core. The issue is caused by improper input handling in that field, enabling arbitrary HTML/JS injection. No exploit details or remediation are provided in ...
5.4CVSS5.1AI score0.00875EPSS
SaveExploits1References1Affected Software1
20