CVE-2018-14512 - CVE House
Back to Database
Status published Medium CVE-2018-14512

An XSS vulnerability was discovered in WUZHI CMS 4.1.0. There...

Vulnerability Description

An XSS vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the form[nickname] parameter to the index.php?m=core&f=set&v=sendmail URI. When the administrator accesses the "system settings - mail server" screen, the XSS payload is triggered.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2018-14512

Credits & Attribution

No credits recorded in the NVD database.

References

More from wuzhicms

View All →
CVE-2022-36168
A directory traversal vulnerability was discovered in Wuzhicms 4.1.0. via...
Low 2.7
CVE-2022-27431
Wuzhicms v4.1.0 was discovered to contain a SQL injection vulnerability...
Critical 9.8
CVE-2021-41654
SQL injection vulnerabilities exist in Wuzhicms v4.1.0 which allows attackers...
Critical 9.8
CVE-2021-40674
An SQL injection vulnerability exists in Wuzhi CMS v4.1.0 via...
Critical 9.8
CVE-2021-40670
SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the...
Critical 9.8

Affected Vendor

Affected Software

wuzhicms
Vulnerable Versions:
4.1.0

Timeline

Official Publish: July 23rd, 2018
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.