A xss vulnerability was discovered in WUZHI CMS 4.1.0
There is a reflected XSS vulnerability which allows remote attackers to inject arbitrary web script or HTML via the imgurl parameter of /index.php?m=attachment&f=imagecut&v=init
Vulnerability file: coreframe/app/attachment/imagecut.php
function init() {
if(isset($GLOBALS['imgBase64'])) {
......