medium5.4
CVE-2020-19770
A cross-site scripting (XSS) vulnerability in the system bulletin component of WUZHI CMS v4.1.0 allows attackers to steal the admin's cookie.
Impact
A cross-site scripting (XSS) vulnerability in the system bulletin component of WUZHI CMS v4.1.0 allows attackers to steal the admin's cookie.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wuzhicms | Wuzhicms | Version 4.1.0 |