https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sun, 08 Nov 2026 23:35:15 +0000 https://db.gcve.eu/vuln/cnvd-2018-14090 cnvd-2018-14090 https://db.gcve.eu/vuln/cnvd-2018-14090 https://db.gcve.eu/vuln/fkie_cve-2018-14512 <p>An XSS vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the form[nickname] parameter to the index.php?m=core&amp;f=set&amp;v=sendmail URI. When the administrator accesses the &#34;system settings - mail server&#34; screen, the XSS payload is triggered.</p> <p>An XSS vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the form[nickname] parameter to the index.php?m=core&amp;f=set&amp;v=sendmail URI. When the administrator accesses the &#34;system settings - mail server&#34; screen, the XSS payload is triggered.</p> https://db.gcve.eu/vuln/fkie_cve-2018-14512 https://db.gcve.eu/vuln/ghsa-xhjj-qxf6-5q66 <p>An XSS vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the form[nickname] parameter to the index.php?m=core&amp;f=set&amp;v=sendmail URI. When the administrator accesses the &#34;system settings - mail server&#34; screen, the XSS payload is triggered.</p> <p>An XSS vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the form[nickname] parameter to the index.php?m=core&amp;f=set&amp;v=sendmail URI. When the administrator accesses the &#34;system settings - mail server&#34; screen, the XSS payload is triggered.</p> https://db.gcve.eu/vuln/ghsa-xhjj-qxf6-5q66 https://db.gcve.eu/vuln/gsd-2018-14512 gsd-2018-14512 https://db.gcve.eu/vuln/gsd-2018-14512