This vulnerability in WuzhiCMS up to version 4.1.0 involves the ckditor::saveRemote function within the Remote Image Fetch feature. By manipulating the source[] parameter, an attacker can perform server-side request forgery, potentially causing the server to make unintended HTTP requests. The flaw is remotely exploitable without authentication. Although the issue was reported early, the project has not issued a fix or official advisory. Public exploit code exists, increasing the risk of exploitation.

Successful exploitation can lead to SSRF attacks, allowing an attacker to make arbitrary HTTP requests from the vulnerable server. This can be leveraged to access internal resources, bypass firewalls, or perform further attacks depending on the server environment. The CVSS 4.0 score of 6.9 indicates a medium severity impact with network attack vector and no privileges or user interaction required.

No official fix or patch is currently available as the vendor has not responded to the issue report. Users should monitor the vendor's communications for updates. Until a patch is released, consider restricting outbound HTTP requests from the server or applying network-level controls to limit SSRF impact.