Wuzhi CMS v4.1 contains a SQL injection vulnerability in the checktitle() function in /coreframe/app/content/admin/content.php.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-20122
Reference (s):
- https://github.com/SuperSalsa20/WUZHICMS-SQL-Injection/blob/master/README.md