Cross Site Scripting (XSS) in Wuzhi CMS v4.1.0 allows remote attackers to execute arbitrary code via the "Title" parameter in the component "/coreframe/app/guestbook/myissue.php".
Metrics
Affected Vendors & Products
References
Link | Providers |
---|---|
https://github.com/wuzhicms/wuzhicms/issues/174 |
History
No history.
MITRE
Status: PUBLISHED
Assigner: mitre
Published: 2021-06-22T15:08:35
Updated: 2024-08-04T14:00:49.280Z
Reserved: 2020-08-13T00:00:00
Link: CVE-2020-18654
Vulnrichment
No data.
NVD
Status : Modified
Published: 2021-06-22T16:15:07.747
Modified: 2024-11-21T05:08:40.260
Link: CVE-2020-18654
Redhat
No data.