An issue was discovered in WUZHI CMS V4.1.0. There is a persistent XSS vulnerability that can steal the administrator cookies via the tag[tag] parameter to the index.php?m=tags&f=index&v=add&&_su=wuzhicms URI. After a website editor (whose privilege is lower than the administrator) logs in, he can add a new TAGS with the XSS payload.
History

No history.

cve-icon MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2018-04-19T08:00:00

Updated: 2024-08-05T07:32:01.607Z

Reserved: 2018-04-19T00:00:00

Link: CVE-2018-10221

cve-icon Vulnrichment

No data.

cve-icon NVD

Status : Modified

Published: 2018-04-19T08:29:00.457

Modified: 2024-11-21T03:41:02.373

Link: CVE-2018-10221

cve-icon Redhat

No data.