CVE-2019-9108

XSS exists in WUZHI CMS 4.1.0 via index.php?m=core&f=map&v=baidumap&x=[XSS]&y=[XSS] to coreframe/app/core/map.php.

• CWE-79

• https://gist.github.com/redeye5/ebfef23f0a063b82779151f9cde8e480Exploit, Third Party Advisory
• https://github.com/wuzhicms/wuzhicms/issues/171Exploit, Issue Tracking, Third Party Advisory
• https://gist.github.com/redeye5/ebfef23f0a063b82779151f9cde8e480Exploit, Third Party Advisory
• https://github.com/wuzhicms/wuzhicms/issues/171Exploit, Issue Tracking, Third Party Advisory

Published

Feb 25, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-9102An issue was discovered on Moxa MGate MB3170 and MB3270 devi…8.8
• CVE-2019-9103An issue was discovered on Moxa MGate MB3170 and MB3270 devi…5.3
• CVE-2019-9104An issue was discovered on Moxa MGate MB3170 and MB3270 devi…7.5
• CVE-2019-9105The WebApp v04.68 in the supervisor on SAET Impianti Special…
• CVE-2019-9106The WebApp v04.68 in the supervisor on SAET Impianti Special…
• CVE-2019-9107XSS exists in WUZHI CMS 4.1.0 via index.php?m=attachment&f=i…
• CVE-2019-9109XSS exists in WUZHI CMS 4.1.0 via index.php?m=message&f=mess…
• CVE-2019-9110XSS exists in WUZHI CMS 4.1.0 via index.php?m=content&f=post…
• CVE-2019-9111The msm gpu driver for custom Linux kernels on the Xiaomi pe…
• CVE-2019-9112The msm gpu driver for custom Linux kernels on the Xiaomi pe…
• CVE-2019-9113Ming (aka libming) 0.4.8 has a NULL pointer dereference in t…
• CVE-2019-9114Ming (aka libming) 0.4.8 has an out of bounds write vulnerab…