Wuzhicms · Wuzhi Cms · CVE-2022-36168
**Name of the Vulnerable Software and Affected Versions**
Wuzhicms version 4.1.0
**Description**
A directory traversal issue was found in Wuzhicms via the `/coreframe/app/attachment/admin/index.php` endpoint.
**Recommendations**
For Wuzhicms version 4.1.0, consider restricting access to the `/coreframe/app/attachment/admin/index.php` endpoint until a patch is available.
At the moment, there is no information about a newer version that contains a fix for this vulnerability.