CVE-2018-10311

Publication date

2018-04-24 02:00:00

Family

mitre

State

PUBLISHED

Description

A vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the tag[pinyin] parameter to the /index.php?m=tags&f=index&v=add URI.