CVE-2018-17426: Wuzhicms

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

WUZHI CMS 4.1.0 has stored XSS via the "Extension module" "SMS in station" field under the index.php?m=core URI.

Affected products

• Wuzhicms Wuzhicms: version 4.1.0 only

Published 2019-03-07. Last modified 2026-06-17.