wuzhicms

Top products

The 15 most recently published vulnerabilities affecting wuzhicms.

• CVE-2025-3563WuzhiCMS Setting index.php set code injection4.7Apr 14, 2025
• CVE-2025-25916wuzhicms v4.1.0 has a Cross Site Scripting (XSS) vulnerability in del function in \coreframe\app\member\admin\group.php.5.4Feb 28, 2025
• CVE-2025-0480wuzhicms config.php test server-side request forgery4.3Jan 15, 2025
• CVE-2024-10505wuzhicms block.php edit code injection6.3Oct 30, 2024
• CVE-2024-32206A stored cross-site scripting (XSS) vulnerability in the component \affiche\admin\index.php of WUZHICMS v4.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload inject...4.6Apr 19, 2024
• CVE-2024-31008An issue was discovered in WUZHICMS version 4.1.0, allows an attacker to execute arbitrary code and obtain sensitive information via the index.php file.6.5Apr 3, 2024
• CVE-2023-52064Wuzhicms v4.1.0 was discovered to contain a SQL injection vulnerability via the $keywords parameter at /core/admin/copyfrom.php.9.8Jan 10, 2024
• CVE-2023-46482SQL injection vulnerability in wuzhicms v.4.1.0 allows a remote attacker to execute arbitrary code via the Database Backup Functionality in the coreframe/app/database/admin/index.php component.9.8Nov 1, 2023
• CVE-2020-36037An issue was disocvered in wuzhicms version 4.1.0, allows remote attackers to execte arbitrary code via the setting parameter to the ueditor in index.php.8.8Aug 11, 2023
• CVE-2020-20413SQL injection vulnerability found in WUZHICMS v.4.1.0 allows a remote attacker to execute arbitrary code via the checktitle() function in admin/content.php.9.8Jun 20, 2023
• CVE-2020-21325An issue in WUZHI CMS v.4.1.0 allows a remote attacker to execute arbitrary code via the set_chache method of the function\common.func.php file.8.8Jun 20, 2023
• CVE-2023-31860Wuzhi CMS v3.1.2 has a storage type XSS vulnerability in the backend of the Five Finger CMS b2b system.5.4May 23, 2023
• CVE-2023-30123wuzhicms v4.1.0 is vulnerable to Cross Site Scripting (XSS) in the Member Center, Account Settings.5.4Apr 28, 2023
• CVE-2022-36168A directory traversal vulnerability was discovered in Wuzhicms 4.1.0. via /coreframe/app/attachment/admin/index.php:2.7Aug 25, 2022
• CVE-2020-19897A reflected Cross Site Scripting (XSS) in wuzhicms v4.1.0 allows remote attackers to execute arbitrary web script or HTML via the imgurl parameter.6.1Jun 28, 2022