Security Advisory

CVE-2018-10311

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2018-04-24 02:00:00
Last updated 2024-08-05 07:39:06
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

A vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the tag[pinyin] parameter to the /index.php?m=tags&f=index&v=add URI.