medium6.1
CVE-2020-19897
A reflected Cross Site Scripting (XSS) in wuzhicms v4.1.0 allows remote attackers to execute arbitrary web script or HTML via the imgurl parameter.
Impact
A reflected Cross Site Scripting (XSS) in wuzhicms v4.1.0 allows remote attackers to execute arbitrary web script or HTML via the imgurl parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wuzhicms | Wuzhicms | Version 4.1.0 |