Wuzhicms v4.1.0 was discovered to contain a SQL injection vulnerability via the $keywords parameter at /core/admin/copyfrom.php.

Published Jan 10, 2024 · Updated Jun 3, 2025 · Assigned by mitre