Executive brief
WuzhiCMS is a content management system used to build and manage websites. A flaw in the member login page allows attackers with valid credentials to redirect authenticated users to malicious external websites after login, enabling phishing attacks where users trust the legitimate domain during login before being redirected to attacker-controlled pages.
Technical details
An open redirect vulnerability exists in the /index.php?m=member&v=login endpoint where the "forward" parameter is not properly validated before being passed to a redirect function. The vulnerability requires valid member credentials to exploit. The application only sanitizes XSS keywords but fails to restrict the forward parameter to relative URLs or same-origin destinations, allowing attackers to inject arbitrary external URLs.
Affected products
- WuzhiCMS WuzhiCMS up to 4.1.0
Timeline
- 2026-09-21: disclosed: Vulnerability published
- 2026-05-29: other: Verified on version 4.1.0