Login Request a demo
JI
Vendor
jizhiCMS
1 product with CVEs on record
41
CVEs
0
On KEV
1
New 30D
Products
JI
jizhiCMS
jizhiCMS
9.8
41 CVEs0 on KEV1 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2026-116274
New
JI
JIZHICMS
Jizhicms
4.3
0%
Oct 26JIZHICMS Front-end Order OrderController.php pay improper authorization
CVE-2026-6978
JI
JiZhiCMS
Jizhicms
4.7
0%
Apr 25JiZhiCMS addcache.html htmlspecialchars_decode sql injection
CVE-2025-50229
JI
Jizhicms
Jizhicms
9.8
0%
Apr 23Jizhicms v2.5.4 is vulnerable to SQL injection in the product editing module
CVE-2025-50228
JI
Jizhicms
Jizhicms
9.1
0%
Apr 9Jizhicms v2.5.4 is vulnerable to Server-Side Request Forgery (SSRF) in User Evaluation, Message, and Comment modules
CVE-2026-29840
JI
Jizhicms
Jizhicms
5.4
0%
Mar 24JiZhiCMS v2.5.6 and before contains a Stored Cross-Site Scripting (XSS) vulnerability in the release function within app/home/c/UserController.php
CVE-2026-3292
JI
jizhiCMS
Jizhicms
8.8
0%
Feb 27jizhiCMS Batch Model.php findAll sql injection
CVE-2025-70397
JI
Jizhicms
Jizhicms
7.2
0%
Feb 17jizhicms 2.5.6 is vulnerable to SQL Injection in Article/deleteAll and Extmolds/deleteAll via the data parameter
CVE-2020-37117
JI
jizhiCMS
jizhiCMS
8.8
1%
Feb 5jizhiCMS 1.6.7 - Arbitrary File Download
CVE-2025-14013
JI
JIZHICMS
Jizhicms
4.8
0%
Dec 4JIZHICMS Comment addcomment.html cross site scripting
CVE-2025-14012
JI
JIZHICMS
Jizhicms
7.2
0%
Dec 4JIZHICMS Batch Delete Comments deleteAll.html delete sql injection
CVE-2025-14011
JI
JIZHICMS
Jizhicms
7.2
0%
Dec 4JIZHICMS Add Display Name Field addcomment.html commentlist sql injection
CVE-2025-2639
JI
Jizhicms
Jizhicms
5.3
0%
Mar 23JIZHICMS Article release.html improper authorization
CVE-2025-2638
JI
Jizhicms
Jizhicms
5.3
0%
Mar 23JIZHICMS Article release.html improper authorization
CVE-2025-2637
JI
Jizhicms
Jizhicms
5.3
0%
Mar 23JIZHICMS Account Profile Page userinfo.html improper authorization
CVE-2025-25785
JI
Jizhicms
Jizhicms
9.1
0%
Feb 26JizhiCMS v2.5.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the component \c\PluginsController.php
CVE-2025-25784
JI
Jizhicms
Jizhicms
9.8
1%
Feb 26An arbitrary file upload vulnerability in the component \c\TemplateController.php of Jizhicms v2.5.4 allows attackers to execute arbitrary code via uploading a crafted Zip file
CVE-2024-34255
JI
Jizhicms
Jizhicms
6.1
0%
May 8jizhicms v2.5.1 contains a Cross-Site Scripting(XSS) vulnerability in the message function
CVE-2024-33338
JI
Jizhicms
Jizhicms
7.3
1%
Apr 29Cross Site Scripting vulnerability in jizhicms v.2.5.4 allows a remote attacker to obtain sensitive information via a crafted article publication request
CVE-2024-32161
JI
Jizhicms
Jizhicms
9.8
1%
Apr 17jizhiCMS 2.5 suffers from a File upload vulnerability
CVE-2023-51154
JI
Jizhicms
Jizhicms
9.8
1%
Jan 4Jizhicms v2.5 was discovered to contain an arbitrary file download vulnerability via the component /admin/c/PluginsController.php
CVE-2023-50692
JI
Jizhicms
Jizhicms
8.8
1%
Dec 28File Upload vulnerability in JIZHICMS v.2.5, allows remote attacker to execute arbitrary code via a crafted file uploaded and downloaded to the download_url parameter in the…
CVE-2023-43836
JI
Jizhicms
Jizhicms
6.5
1%
Oct 2There is a SQL injection vulnerability in the Jizhicms 2.4.9 backend, which users can use to obtain database information
CVE-2023-38948
JI
Jizhicms
Jizhicms
7.2
1%
Aug 3An arbitrary file download vulnerability in the /c/PluginsController.php component of jizhi CMS 1.9.5 allows attackers to execute arbitrary code via downloading a crafted plugin
CVE-2023-2927
JI
Jizhicms
Jizhicms
9.8
1%
May 27JIZHICMS TemplateController.php index server-side request forgery
CVE-2023-31862
JI
Jizhicms
Jizhicms
5.4
0%
May 19jizhicms v2.4.6 is vulnerable to Cross Site Scripting (XSS)
CVE-2023-27235
JI
Jizhicms
Jizhicms
7.2
1%
Mar 15An arbitrary file upload vulnerability in the \admin\c\CommonController.php component of Jizhicms v2.4.5 allows attackers to execute arbitrary code via a crafted phtml file
CVE-2023-27234
JI
Jizhicms
Jizhicms
6.5
0%
Mar 15A Cross-Site Request Forgery (CSRF) in /Sys/index.html of Jizhicms v2.4.5 allows attackers to arbitrarily make configuration changes within the application
CVE-2021-36484
JI
Jizhicms
Jizhicms
9.8
1%
Feb 3SQL injection vulnerability in JIZHICMS 1.9.5 allows attackers to run arbitrary SQL commands via add or edit article page
CVE-2022-44140
JI
Jizhicms
Jizhicms
8.8
1%
Nov 23Jizhicms v2.3.3 was discovered to contain a SQL injection vulnerability via the /Member/memberedit.html component
CVE-2022-45278
JI
Jizhicms
Jizhicms
8.8
1%
Nov 23Jizhicms v2.3.3 was discovered to contain a SQL injection vulnerability via the /index.php/admins/Fields/get_fields.html component
CVE-2021-29334
JI
Jizhicms
Jizhicms
8.8
0%
Nov 23An issue was discovered in JIZHI CMS 1.9.4
CVE-2022-36578
JI
Jizhicms
Jizhicms
9.8
1%
Aug 19jizhicms v2.3.1 has SQL injection in the background
CVE-2022-36577
JI
Jizhicms
Jizhicms
8.8
0%
Aug 19An issue was discovered in jizhicms v2.3.1
CVE-2022-31393
JI
Jizhicms
Jizhicms
9.1
1%
Jun 9Jizhicms v2.2.5 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via the Index function in app/admin/c/PluginsController.php
CVE-2022-31390
JI
Jizhicms
Jizhicms
9.1
1%
Jun 9Jizhicms v2.2.5 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via the Update function in app/admin/c/TemplateController.php
CVE-2022-27429
JI
Jizhicms
Jizhicms
9.8
1%
Apr 25Jizhicms v1.9.5 was discovered to contain a Server-Side Request Forgery (SSRF) vulnerability via /admin.php/Plugins/update.html
CVE-2020-21228
JI
Jizhicms
Jizhicms
6.1
1%
Oct 1JIZHICMS 1.5.1 contains a cross-site scripting (XSS) vulnerability in the component /user/release.html, which allows attackers to arbitrarily add an administrator cookie
CVE-2020-21483
JI
Jizhicms
Jizhicms
7.2
2%
Sep 15An arbitrary file upload vulnerability in Jizhicms v1.5 allows attackers to execute arbitrary code via a crafted .jpg file which is later changed to a PHP file
CVE-2020-23644
JI
Jizhicms
Jizhicms
6.1
1%
Jan 11XSS exists in JIZHICMS 1.7.1 via index.php/Error/index?msg={XSS] to Home/c/ErrorController.php
CVE-2020-23643
JI
Jizhicms
Jizhicms
6.1
1%
Jan 11XSS exists in JIZHICMS 1.7.1 via index.php/Wechat/checkWeixin?signature=1&echostr={XSS] to Home/c/WechatController.php
CVE-2019-17593
JI
Jizhicms
Jizhicms
8.8
0%
Oct 14JIZHICMS 1.5.1 allows admin.php/Admin/adminadd.html CSRF to add an administrator