Persistent XSS Vulnerability in WUZHI CMS by WUZHI Technology
CVE-2018-10311
6.1MEDIUM
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2018-10311?
A persistent XSS vulnerability exists in WUZHI CMS 4.1.0, where remote attackers can exploit the system by injecting arbitrary web scripts or HTML through the 'tag[pinyin]' parameter in the URI '/index.php?m=tags&f=index&v=add'. This flaw can compromise web applications by allowing malicious content to be stored and executed in the user’s browser, exposing users to potential data theft and other cyber threats. Proper input validation and sanitization are essential to mitigate this issue.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.