https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-3563.htmlhttps://patchthecve.com/cve/CVE-2025-3563.htmlWed, 17 Jun 2026 09:20:11 +0000MEDIUM 4.7: A vulnerability was found in WuzhiCMS 4.1. It has been rated as critical. Affected by this issue is the function Set of the file /index.php?m=attachment&f=index&_su=wuzhicms&v=set&submit=1 of the component Setting Handler. The manipulation of the argument Setting leads to code injection. The attack https://patchthecve.com/cve/CVE-2025-25916.htmlhttps://patchthecve.com/cve/CVE-2025-25916.htmlWed, 17 Jun 2026 09:01:18 +0000MEDIUM 5.4: wuzhicms v4.1.0 has a Cross Site Scripting (XSS) vulnerability in del function in \coreframe\app\member\admin\group.php.https://patchthecve.com/cve/CVE-2025-0480.htmlhttps://patchthecve.com/cve/CVE-2025-0480.htmlWed, 17 Jun 2026 08:26:34 +0000MEDIUM 4.3: A vulnerability classified as problematic has been found in wuzhicms 4.1.0. This affects the function test of the file coreframe/app/search/admin/config.php. The manipulation of the argument sphinxhost/sphinxport leads to server-side request forgery. It is possible to initiate the attack remotely. Thttps://patchthecve.com/cve/CVE-2024-10505.htmlhttps://patchthecve.com/cve/CVE-2024-10505.htmlWed, 17 Jun 2026 06:55:49 +0000MEDIUM 6.3: A vulnerability was found in wuzhicms 4.1.0. It has been classified as critical. Affected is the function add/edit of the file www/coreframe/app/content/admin/block.php. The manipulation leads to code injection. It is possible to launch the attack remotely. The exploit has been disclosed to the publhttps://patchthecve.com/cve/CVE-2024-32206.htmlhttps://patchthecve.com/cve/CVE-2024-32206.htmlThu, 09 Jul 2026 01:19:01 +0000MEDIUM 4.6: A stored cross-site scripting (XSS) vulnerability in the component \affiche\admin\index.php of WUZHICMS v4.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the $formdata parameter.https://patchthecve.com/cve/CVE-2024-31008.htmlhttps://patchthecve.com/cve/CVE-2024-31008.htmlWed, 17 Jun 2026 07:27:40 +0000MEDIUM 6.5: An issue was discovered in WUZHICMS version 4.1.0, allows an attacker to execute arbitrary code and obtain sensitive information via the index.php file.