CVE-2019-9109

XSS exists in WUZHI CMS 4.1.0 via index.php?m=message&f=message&v=add&username=[XSS] to coreframe/app/message/message.php.

• CWE-79

• https://gist.github.com/redeye5/57ccafea7263efec67c82b0503c72480Exploit, Third Party Advisory
• https://github.com/wuzhicms/wuzhicms/issues/172Exploit, Issue Tracking, Third Party Advisory
• https://gist.github.com/redeye5/57ccafea7263efec67c82b0503c72480Exploit, Third Party Advisory
• https://github.com/wuzhicms/wuzhicms/issues/172Exploit, Issue Tracking, Third Party Advisory

Published

Feb 25, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-9103An issue was discovered on Moxa MGate MB3170 and MB3270 devi…5.3
• CVE-2019-9104An issue was discovered on Moxa MGate MB3170 and MB3270 devi…7.5
• CVE-2019-9105The WebApp v04.68 in the supervisor on SAET Impianti Special…
• CVE-2019-9106The WebApp v04.68 in the supervisor on SAET Impianti Special…
• CVE-2019-9107XSS exists in WUZHI CMS 4.1.0 via index.php?m=attachment&f=i…
• CVE-2019-9108XSS exists in WUZHI CMS 4.1.0 via index.php?m=core&f=map&v=b…
• CVE-2019-9110XSS exists in WUZHI CMS 4.1.0 via index.php?m=content&f=post…
• CVE-2019-9111The msm gpu driver for custom Linux kernels on the Xiaomi pe…
• CVE-2019-9112The msm gpu driver for custom Linux kernels on the Xiaomi pe…
• CVE-2019-9113Ming (aka libming) 0.4.8 has a NULL pointer dereference in t…
• CVE-2019-9114Ming (aka libming) 0.4.8 has an out of bounds write vulnerab…
• CVE-2019-9115In irisnet-crypto before 1.1.7 for IRISnet, the util/utils.j…