CVE-2018-14512

An XSS vulnerability was discovered in WUZHI CMS 4.1.0

published July 23, 2018

CVSS
—
EPSS
1%
Percentile
65.0
In the wild
Unconfirmed
What it is

An XSS vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the form[nickname] parameter to the index.php?m=core&f=set&v=sendmail URI. When the administrator accesses the "system settings - mail server" screen, the XSS payload is triggered.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01085 · 65.0th percentile
Published
2018-07-23T08:00Z
EPSS history
Timeline
  • 23 JUL 08:00Z
    An XSS vulnerability was discovered in WUZHI CMS 4.1.0
    cvelistv5