wCMS version 1.4 has a Cross Site Scripting (XSS) vulnerability that occurs when creating a new blog. This vulnerability allows an attacker to inject malicious scripts that can execute in the context of the victim's browser. The vulnerability has a CVSS score of 6.1, indicating a medium severity level.