VYPR
← All advisories
Medium severity6.1NVD Advisory· Published Jun 22, 2021· Updated Jun 17, 2026

CVE-2020-18654

CVE-2020-18654

Description

Cross Site Scripting (XSS) in Wuzhi CMS v4.1.0 allows remote attackers to execute arbitrary code via the "Title" parameter in the component "/coreframe/app/guestbook/myissue.php".

Affected products

3
  • WuzhiCMS/Wuzhicmsllm-fuzzy2 versions
    =4.1.0+ 1 more
    • (no CPE)range: =4.1.0
    • cpe:2.3:a:wuzhicms:wuzhicms:4.1.0:*:*:*:*:*:*:*
  • WuzhiCMS/CMScpe-rescue

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.