5.3
Medium
CVE-2025-0480 A vulnerability classified as problematic has been found in wuzhicms 4.1.0
Description
A vulnerability classified as problematic has been found in wuzhicms 4.1.0. This affects the function test of the file coreframe/app/search/admin/config.php. The manipulation of the argument sphinxhost/sphinxport leads to server-side request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| wuzhicms | 4.1.0 | No fix stated |
Other CVEs of wuzhicms
The 8 CVEs of wuzhicms →
CVE-2026-94102
A flaw has been found in WuzhiCMS up to 4.1.0
5.3
Medium
CVE-2026-92380
A flaw has been found in WuzhiCMS up to 4.1.0
6.9
Medium
CVE-2026-91849
A security flaw has been discovered in WuzhiCMS up to 4.1.0
5.3
Medium
CVE-2026-91848
A vulnerability was identified in WuzhiCMS up to 4.1.0
6.9
Medium