An issue was discovered in WUZHI CMS 4.1.0 There is a Stored XSS Vulnerability in \Account Settings -> Member Centre -> Chinese information -> Ordinary member\ via a QQ number as demonstrated by a formqq_10= substring.