Description WUZHI CMS 4.1.0 has SQL Injection via an api/sms_check.php?param= URI. References https://github.com/wuzhicms/wuzhicms/issues/138