https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 08 Nov 2026 23:35:17 +0000 https://db.gcve.eu/vuln/cnvd-2018-09387 cnvd-2018-09387 https://db.gcve.eu/vuln/cnvd-2018-09387 https://db.gcve.eu/vuln/fkie_cve-2018-10221 <p>An issue was discovered in WUZHI CMS V4.1.0. There is a persistent XSS vulnerability that can steal the administrator cookies via the tag[tag] parameter to the index.php?m=tags&amp;f=index&amp;v=add&amp;&amp;_su=wuzhicms URI. After a website editor (whose privilege is lower than the administrator) logs in, he can add a new TAGS with the XSS payload.</p> <p>An issue was discovered in WUZHI CMS V4.1.0. There is a persistent XSS vulnerability that can steal the administrator cookies via the tag[tag] parameter to the index.php?m=tags&amp;f=index&amp;v=add&amp;&amp;_su=wuzhicms URI. After a website editor (whose privilege is lower than the administrator) logs in, he can add a new TAGS with the XSS payload.</p> https://db.gcve.eu/vuln/fkie_cve-2018-10221 https://db.gcve.eu/vuln/ghsa-fcr4-9q78-7xr5 <p>An issue was discovered in WUZHI CMS V4.1.0. There is a persistent XSS vulnerability that can steal the administrator cookies via the tag[tag] parameter to the index.php?m=tags&amp;f=index&amp;v=add&amp;&amp;_su=wuzhicms URI. After a website editor (whose privilege is lower than the administrator) logs in, he can add a new TAGS with the XSS payload.</p> <p>An issue was discovered in WUZHI CMS V4.1.0. There is a persistent XSS vulnerability that can steal the administrator cookies via the tag[tag] parameter to the index.php?m=tags&amp;f=index&amp;v=add&amp;&amp;_su=wuzhicms URI. After a website editor (whose privilege is lower than the administrator) logs in, he can add a new TAGS with the XSS payload.</p> https://db.gcve.eu/vuln/ghsa-fcr4-9q78-7xr5 https://db.gcve.eu/vuln/gsd-2018-10221 gsd-2018-10221 https://db.gcve.eu/vuln/gsd-2018-10221