An issue exists in WUZHI CMS 4.1.0. The "Extension Module -> System Announcement" feature has Stored XSS via an announcement.
wuzhicms wuzhi cms 4.1.0