CVE-2026-92380
HighCVSS 7.3Summary
WuzhiCMS up to 4.1.0 has an SSRF vulnerability in the ckditor::saveRemote function in coreframe/app/attachment/index.php (Remote Image Fetch component). Manipulation of source[] parameter leads to server-side request forgery.
Risk Assessment
Attackers can exploit the vulnerability to send requests to internal resources, potentially leading to confidentiality and availability issues.
Recommendation
Upgrade WuzhiCMS to the latest version or apply temporary mitigations such as input validation in the ckditor::saveRemote function.
Other vulnerabilities in WuzhiCMS
See all- CVE-2026-88419High
An unrestricted upload of files with a dangerous type in the thumbnail-upload endpoint (/index.php?m=member&f=article&v=thumbUpload) of WuzhiCMS 5.0.0 allows an authenticated low-privileged member to upload a crafted .php file and execute arbitrary PHP code on the server.
- CVE-2026-94102Medium
A flaw was found in WuzhiCMS up to 4.1.0 in /index.php?m=member&v=Login (Login component). Manipulation of the forward argument causes open redirect. The attack can be initiated remotely and the exploit has been published.
- CVE-2026-91849Medium
A security flaw has been discovered in WuzhiCMS up to 4.1.0. This affects the function member::setAvatar of the file /index.php?m=member&f=user&v=setAvatar of the Avatar Upload component. The manipulation of the argument File results in unrestricted upload.
- CVE-2026-91848High
A vulnerability was identified in WuzhiCMS up to 4.1.0 in the article::getDataOfJson function of /index.php?m=content&f=article&v=getDataOfJson. Manipulation of the title/master_table arguments leads to SQL injection. The exploit is publicly available and can be used remotely.
- CVE-2026-15530Medium
A vulnerability has been found in WuzhiCMS up to version 4.1.0 in the Attachment API component. The config/listimage function in the file /index.php?m=attachment&f=index&v=upload allows manipulation leading to information disclosure. The attack can be performed remotely and an exploit has been published.
- CVE-2024-32206Medium
In WUZHICMS v4.1.0, a stored XSS vulnerability exists in the /affiche/admin/index.php component. Attackers can inject arbitrary scripts or HTML via the $formdata parameter.
Original NVD description (English source)
A flaw has been found in WuzhiCMS up to 4.1.0. The impacted element is the function ckditor::saveRemote of the file coreframe/app/attachment/index.php of the component Remote Image Fetch. This manipulation of the argument source[] causes server-side request forgery. The attack can be initiated remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS