CVE-2021-40669

SQL Injection vulnerability exists in Wuzhi CMS 4.1.0 via the keywords parameter under the coreframe/app/promote/admin/index.php file.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2021-09-16

Last modified

2024-08-04

Weaknesses

CWE-89

Affected products

• Wuzhicms (Wuzhicms)

References

• https://github.com/wuzhicms/wuzhicms/issues/196