WTCMS 1.0 contains a stored cross-site scripting (XSS) vulnerability in the link field under the background menu management module.Referenceshttps://github.com/taosir/wtcms/issues/11
