CVE-2021-41654: Wuzhicms

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

SQL injection vulnerabilities exist in Wuzhicms v4.1.0 which allows attackers to execute arbitrary SQL commands via the $keyValue parameter in /coreframe/app/pay/admin/index.php

Affected products

• Wuzhicms Wuzhicms: version 4.1.0 only

Published 2022-06-16. Last modified 2026-06-17.