CVE-2026-91848
HighCVSS 7.3Summary
A vulnerability was identified in WuzhiCMS up to 4.1.0 in the article::getDataOfJson function of /index.php?m=content&f=article&v=getDataOfJson. Manipulation of the title/master_table arguments leads to SQL injection. The exploit is publicly available and can be used remotely.
Risk Assessment
A remote attacker can use the publicly available exploit for SQL injection, potentially leading to data leakage or modification in the database. The project has not responded to the issue report.
Recommendation
Given the project's lack of response, consider restricting access to the vulnerable endpoint or applying a custom fix validating the title/master_table arguments. Monitor the database for unusual queries.
Other vulnerabilities in WuzhiCMS
See all- CVE-2026-91849Medium
A security flaw has been discovered in WuzhiCMS up to 4.1.0. This affects the function member::setAvatar of the file /index.php?m=member&f=user&v=setAvatar of the Avatar Upload component. The manipulation of the argument File results in unrestricted upload.
- CVE-2026-15530Medium
A vulnerability has been found in WuzhiCMS up to version 4.1.0 in the Attachment API component. The config/listimage function in the file /index.php?m=attachment&f=index&v=upload allows manipulation leading to information disclosure. The attack can be performed remotely and an exploit has been published.
- CVE-2024-32206Medium
In WUZHICMS v4.1.0, a stored XSS vulnerability exists in the /affiche/admin/index.php component. Attackers can inject arbitrary scripts or HTML via the $formdata parameter.
Original NVD description (English source)
A vulnerability was identified in WuzhiCMS up to 4.1.0. Affected by this issue is the function article::getDataOfJson of the file /index.php?m=content&f=article&v=getDataOfJson. The manipulation of the argument title/master_table leads to sql injection. Remote exploitation of the attack is possible. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.