Stored XSS Vulnerability in WUZHI CMS 4.1.0 Product by WUZHI
CVE-2018-17426

5.4MEDIUM

Key Information:

Vendor: Wuzhicms
Status: Wuzhi Cms
Vendor: CVE Published:; 7 March 2019

What is CVE-2018-17426?

WUZHI CMS version 4.1.0 contains a stored XSS vulnerability that allows an attacker to inject malicious scripts through the 'Extension module' in the 'SMS in station' field under the index.php?m=core URI. This security flaw poses a serious risk to web applications using this CMS by enabling unauthorized actions and potentially compromising user data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://github.com/wuzhicms/wuzhicms/issues/154

x_refsource_MISC

CVSS V3.1

Score:

5.4

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

Low

User Interaction:

Required

Scope:

Changed

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Mar 7, 2019
Vulnerability Reserved
Sep 23, 2018

JSON

Wuzhicms

What is CVE-2018-17426?

Human OS v1.0: Ageing Is an Unpatched Zero-Day Vulnerability.

References

CVSS V3.1

Timeline

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.