medium6.1
CVE-2020-21228
JIZHICMS 1.5.1 contains a cross-site scripting (XSS) vulnerability in the component /user/release.html, which allows attackers to arbitrarily add an administra…
Impact
JIZHICMS 1.5.1 contains a cross-site scripting (XSS) vulnerability in the component /user/release.html, which allows attackers to arbitrarily add an administrator cookie.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jizhicms | Jizhicms | Version 1.5.1 |