CVE-2025-50229심각 9.8Jizhicms v2.5.4 is vulnerable to SQL injection in the product editing module.
CVE-2025-50228심각 9.1Jizhicms v2.5.4 is vulnerable to Server-Side Request Forgery (SSRF) in User Evaluation, Message, and Comment modules.
CVE-2026-29840보통 5.4JiZhiCMS v2.5.6 and before contains a Stored Cross-Site Scripting (XSS) vulnerability in the release function within app/home/c/UserControll…
CVE-2026-3292높음 8.8A security vulnerability has been detected in jizhiCMS up to 2.5.6. Affected is the function findAll in the library frphp/lib/Model.php of t…
CVE-2025-70397높음 7.2jizhicms 2.5.6 is vulnerable to SQL Injection in Article/deleteAll and Extmolds/deleteAll via the data parameter.