CVE-2020-20122

Wuzhi CMS v4.1 contains a SQL injection vulnerability in the checktitle() function in /coreframe/app/content/admin/content.php.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2021-09-28

Last modified

2024-08-04

Weaknesses

CWE-89

Affected products

• Wuzhicms (Wuzhicms)

References

• https://github.com/SuperSalsa20/WUZHICMS-SQL-Injection/blob/master/README.md