CVE-2018-9927: An issue was discovered in WUZHI CMS 4.1.0.

Security readout for executives and security teams

WUZHI CMS 4.1.0 reportedly has a cross-site request forgery flaw that can create a user account. If a logged-in user can be tricked into making the request, an attacker may add an account without direct access. The sources do not provide severity scoring or confirm active exploitation. Exposure appears limited to organizations running WUZHI CMS 4.1.0. The source bundle does not identify affected CPEs, other versions, required privileges, or whether the vulnerable function is administrative-only. Treat internet-facing or externally used CMS administration as higher concern. Prioritize inventory first. If WUZHI CMS 4.1.0 is present, treat this as a near-term remediation item because unauthorized account creation can expand attacker access, even though active exploitation is not evidenced in the sources. Mitigation focus: Check WUZHI CMS project guidance for a fixed release or vendor workaround.; Add or verify CSRF tokens on all account-creation requests.; Restrict account-management access to trusted administrative users only..

Prepared

Jun 7, 2026, 14:03 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.