← Database

CVE-2021-41654

CRITICAL CVSS: 9.8 Published: 2022-06-16 Modified: 2026-06-17

Description

SQL injection vulnerabilities exist in Wuzhicms v4.1.0 which allows attackers to execute arbitrary SQL commands via the $keyValue parameter in /coreframe/app/pay/admin/index.php

Affected Platforms

Wuzhicms Wuzhicms

Weakness Type

CWE-89

References