CVE-2021-40674

CRITICAL CVSS: 9.8 Published: 2021-09-20 Modified: 2026-06-17

Description

An SQL injection vulnerability exists in Wuzhi CMS v4.1.0 via the KeyValue parameter in coreframe/app/order/admin/index.php.

Affected Platforms

Wuzhicms Wuzhicms

Weakness Type

CWE-89

References