PatchTheCVE: wuzhi cmshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2018-18939: An issue was discovered in WUZHI CMS 4.1.0https://patchthecve.com/cve/CVE-2018-18939.htmlhttps://patchthecve.com/cve/CVE-2018-18939.htmlWed, 17 Jun 2026 01:48:09 +0000MEDIUM 4.8: An issue was discovered in WUZHI CMS 4.1.0. There is stored XSS in index.php?m=core&f=index via a seventh input field.CVE-2018-17852: A SQL injection was discovered in WUZHI CMS 4.1.0 in coreframe/app/coupon/admin/card.php via the groupname parhttps://patchthecve.com/cve/CVE-2018-17852.htmlhttps://patchthecve.com/cve/CVE-2018-17852.htmlWed, 17 Jun 2026 01:46:24 +0000CRITICAL 9.8: A SQL injection was discovered in WUZHI CMS 4.1.0 in coreframe/app/coupon/admin/card.php via the groupname parameter to the /index.php?m=coupon&f=card&v=detail_listing URI.CVE-2018-17832: XSS exists in WUZHI CMS 2.0 via the index.php v or f parameter.https://patchthecve.com/cve/CVE-2018-17832.htmlhttps://patchthecve.com/cve/CVE-2018-17832.htmlWed, 17 Jun 2026 01:46:22 +0000MEDIUM 6.1: XSS exists in WUZHI CMS 2.0 via the index.php v or f parameter.CVE-2018-16350: WUZHI CMS 4.1.0 has XSS via the index.php?m=core&f=set&v=basic form[statcode] parameter.https://patchthecve.com/cve/CVE-2018-16350.htmlhttps://patchthecve.com/cve/CVE-2018-16350.htmlWed, 17 Jun 2026 01:44:08 +0000MEDIUM 6.1: WUZHI CMS 4.1.0 has XSS via the index.php?m=core&f=set&v=basic form[statcode] parameter.CVE-2018-16349: WUZHI CMS 4.1.0 has XSS via the index.php?m=link&f=index&v=add form[remark] parameter.https://patchthecve.com/cve/CVE-2018-16349.htmlhttps://patchthecve.com/cve/CVE-2018-16349.htmlWed, 17 Jun 2026 01:44:08 +0000MEDIUM 6.1: WUZHI CMS 4.1.0 has XSS via the index.php?m=link&f=index&v=add form[remark] parameter.CVE-2018-15894: A SQL injection was discovered in /coreframe/app/admin/pay/admin/index.php in WUZHI CMS 4.1.0 via the index.phhttps://patchthecve.com/cve/CVE-2018-15894.htmlhttps://patchthecve.com/cve/CVE-2018-15894.htmlWed, 17 Jun 2026 01:43:16 +0000CRITICAL 9.8: A SQL injection was discovered in /coreframe/app/admin/pay/admin/index.php in WUZHI CMS 4.1.0 via the index.php?m=pay&f=index&v=listing keyValue parameter.CVE-2018-15893: A SQL injection was discovered in /coreframe/app/admin/copyfrom.php in WUZHI CMS 4.1.0 via the index.php?m=corhttps://patchthecve.com/cve/CVE-2018-15893.htmlhttps://patchthecve.com/cve/CVE-2018-15893.htmlWed, 17 Jun 2026 01:43:16 +0000CRITICAL 9.8: A SQL injection was discovered in /coreframe/app/admin/copyfrom.php in WUZHI CMS 4.1.0 via the index.php?m=core&f=copyfrom&v=listing keywords parameter.CVE-2018-14515: A SQL injection was discovered in WUZHI CMS 4.1.0 that allows remote attackers to inject a malicious SQL statehttps://patchthecve.com/cve/CVE-2018-14515.htmlhttps://patchthecve.com/cve/CVE-2018-14515.htmlWed, 17 Jun 2026 01:41:08 +0000CRITICAL 9.8: A SQL injection was discovered in WUZHI CMS 4.1.0 that allows remote attackers to inject a malicious SQL statement via the index.php?m=promote&f=index&v=search keywords parameter.CVE-2018-14513: An XSS vulnerability was discovered in WUZHI CMS 4.1.0https://patchthecve.com/cve/CVE-2018-14513.htmlhttps://patchthecve.com/cve/CVE-2018-14513.htmlWed, 17 Jun 2026 01:41:07 +0000MEDIUM 6.1: An XSS vulnerability was discovered in WUZHI CMS 4.1.0. There is persistent XSS that allows remote attackers to inject arbitrary web script or HTML via the form[content] parameter to the index.php?m=feedback&f=index&v=contact URI.