A vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the tag[pinyin] parameter to the /index.php?m=tags&f=index&v=add URI.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2018-04-24T02:00:00

Updated: 2024-08-05T07:39:06.693Z

Reserved: 2018-04-23T00:00:00

Link: CVE-2018-10311

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-04-24T02:29:00.303

Modified: 2024-11-21T03:41:11.740

Link: CVE-2018-10311

cve-icon Redhat

No data.