Jizhicms vulnerabilities

Products

• Jizhicms 39

Newest

• jizhicms Jizhicms v2.5.4 is vulnerable to SQL injection in the product editing module. CVE-2025-50229 9.8 CriticalApril 23, 2026
• jizhicms Jizhicms v2.5.4 is vulnerable to Server-Side Request Forgery (SSRF) in User Evaluation, Message,... CVE-2025-50228 9.1 CriticalApril 9, 2026
• jizhicms JiZhiCMS v2.5.6 and before contains a Stored Cross-Site Scripting (XSS) vulnerability in the... CVE-2026-29840 5.4 MediumMarch 24, 2026
• jizhicms jizhiCMS Batch Model.php findAll sql injection CVE-2026-3292 5.3 MediumFebruary 27, 2026
• jizhicms jizhicms 2.5.6 is vulnerable to SQL Injection in Article/deleteAll and Extmolds/deleteAll via the... CVE-2025-70397 7.2 HighFebruary 17, 2026
• jizhicms jizhiCMS 1.6.7 - Arbitrary File Download CVE-2020-37117 8.6 HighFebruary 5, 2026
• jizhicms JIZHICMS Comment addcomment.html cross site scripting CVE-2025-14013 4.8 MediumDecember 4, 2025
• jizhicms JIZHICMS Batch Delete Comments deleteAll.html delete sql injection CVE-2025-14012 5.1 MediumDecember 4, 2025
• jizhicms JIZHICMS Add Display Name Field addcomment.html commentlist sql injection CVE-2025-14011 5.1 MediumDecember 4, 2025
• jizhicms JIZHICMS Article release.html improper authorization CVE-2025-2639 5.3 MediumMarch 23, 2025
• jizhicms JIZHICMS Article release.html improper authorization CVE-2025-2638 5.3 MediumMarch 23, 2025
• jizhicms JIZHICMS Account Profile Page userinfo.html improper authorization CVE-2025-2637 5.3 MediumMarch 23, 2025
• jizhicms JizhiCMS v2.5.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the component ... CVE-2025-25785 9.1 CriticalFebruary 26, 2025
• jizhicms An arbitrary file upload vulnerability in the component \c\TemplateController.php of Jizhicms v2... CVE-2025-25784 9.8 CriticalFebruary 26, 2025
• cherry-toto jizhicms jizhicms v2.5.1 contains a Cross-Site Scripting(XSS) vulnerability in the message function. CVE-2024-34255 6.1 MediumMay 8, 2024
• jizhicms Cross Site Scripting vulnerability in jizhicms v.2.5.4 allows a remote attacker to obtain... CVE-2024-33338 7.3 HighApril 29, 2024
• jizhicms jizhiCMS 2.5 suffers from a File upload vulnerability. CVE-2024-32161 9.8 CriticalApril 17, 2024
• jizhicms Jizhicms v2.5 was discovered to contain an arbitrary file download vulnerability via the... CVE-2023-51154 9.8 CriticalJanuary 4, 2024
• jizhicms File Upload vulnerability in JIZHICMS v.2.5, allows remote attacker to execute arbitrary code via... CVE-2023-50692 8.8 HighDecember 28, 2023
• jizhicms There is a SQL injection vulnerability in the Jizhicms 2.4.9 backend, which users can use to... CVE-2023-43836 6.5 MediumOctober 2, 2023
• jizhicms An arbitrary file download vulnerability in the /c/PluginsController.php component of jizhi CMS 1... CVE-2023-38948 7.2 HighAugust 3, 2023
• jizhicms JIZHICMS TemplateController.php index server-side request forgery CVE-2023-2927 6.3 MediumMay 27, 2023
• jizhicms jizhicms v2.4.6 is vulnerable to Cross Site Scripting (XSS). The content of the article published... CVE-2023-31862 5.4 MediumMay 19, 2023
• jizhicms An arbitrary file upload vulnerability in the \admin\c\CommonController.php component of Jizhicms... CVE-2023-27235 7.2 HighMarch 15, 2023
• jizhicms A Cross-Site Request Forgery (CSRF) in /Sys/index.html of Jizhicms v2.4.5 allows attackers to... CVE-2023-27234 6.5 MediumMarch 15, 2023
• jizhicms SQL injection vulnerability in JIZHICMS 1.9.5 allows attackers to run arbitrary SQL commands via... CVE-2021-36484 9.8 CriticalFebruary 3, 2023
• jizhicms Jizhicms v2.3.3 was discovered to contain a SQL injection vulnerability via the /index.php/admins... CVE-2022-45278 8.8 HighNovember 23, 2022
• jizhicms Jizhicms v2.3.3 was discovered to contain a SQL injection vulnerability via the /Member... CVE-2022-44140 8.8 HighNovember 23, 2022
• jizhicms An issue was discovered in JIZHI CMS 1.9.4. There is a CSRF vulnerability that can add an admin... CVE-2021-29334 8.8 HighNovember 23, 2022
• jizhicms jizhicms v2.3.1 has SQL injection in the background. CVE-2022-36578 9.8 CriticalAugust 19, 2022
• jizhicms An issue was discovered in jizhicms v2.3.1. There is a CSRF vulnerability that can add a admin. CVE-2022-36577 8.8 HighAugust 19, 2022
• jizhicms Jizhicms v2.2.5 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via... CVE-2022-31393 9.1 CriticalJune 9, 2022
• jizhicms Jizhicms v2.2.5 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via... CVE-2022-31390 9.1 CriticalJune 9, 2022
• jizhicms Jizhicms v1.9.5 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via ... CVE-2022-27429 9.8 CriticalApril 25, 2022
• jizhicms JIZHICMS 1.5.1 contains a cross-site scripting (XSS) vulnerability in the component /user/release... CVE-2020-21228 6.1 MediumOctober 1, 2021
• jizhicms An arbitrary file upload vulnerability in Jizhicms v1.5 allows attackers to execute arbitrary... CVE-2020-21483 7.2 HighSeptember 15, 2021
• jizhicms XSS exists in JIZHICMS 1.7.1 via index.php/Error/index?msg={XSS] to Home/c/ErrorController.php. CVE-2020-23644 6.1 MediumJanuary 11, 2021
• jizhicms XSS exists in JIZHICMS 1.7.1 via index.php/Wechat/checkWeixin?signature=1&echostr={XSS] to Home/c... CVE-2020-23643 6.1 MediumJanuary 11, 2021
• jizhicms JIZHICMS 1.5.1 allows admin.php/Admin/adminadd.html CSRF to add an administrator. CVE-2019-17593 8.8 HighOctober 14, 2019