medium6.1Public exploit code
CVE-2018-10311
A vulnerability was discovered in WUZHI CMS 4.1.0.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WUZHI CMS 4.1.0 - 'tag[pinyin]' Cross-Site Scripting2018-05-13 · webapps · php
Impact
A vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the tag[pinyin] parameter to the /index.php?m=tags&f=index&v=add URI.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wuzhicms | Wuzhicms | Version 4.1.0 |