CVE-2018-17425: Wuzhicms

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

WUZHI CMS 4.1.0 has stored XSS via the "Membership Center" "I want to ask" "detailed description" field under the index.php?m=member URI.

Affected products

• Wuzhicms Wuzhicms: version 4.1.0 only

Published 2019-03-07. Last modified 2026-06-17.