CVE-2026-94102: WuzhiCMS Login index.php redirect
A flaw has been found in WuzhiCMS up to 4.1.0. This affects an unknown function of the file /index.php?m=member&v=Login of the component Login. This manipulation of the argument forward causes open redirect. The attack can be initiated remotely. The exploit has been published and may be used. The only sanitization is removexss(), an XSS keyword/entity scrubber. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
Which installations should be considered affected?
WuzhiCMS installations up to and including version 4.1.0 should be considered affected where the Login component endpoint at /index.php?m=member&v=Login is exposed.
Does an attacker need an account or privileged access to exploit this?
No authentication or privileges are required. Exploitation can be initiated remotely, but it requires user interaction, such as persuading a user to follow a crafted login-related link.
What is the practical impact of successful exploitation?
The issue enables an open redirect through manipulation of the forward argument. The supplied severity vector indicates low integrity impact and no stated confidentiality or availability impact.
Why is the existing input handling insufficient?
The available sanitization is remove_xss(), which is described as an XSS keyword and entity scrubber. That filtering does not prevent the forward argument from being used for an open redirect.