high7.2
CVE-2023-38948
An arbitrary file download vulnerability in the /c/PluginsController.php component of jizhi CMS 1.9.5 allows attackers to execute arbitrary code via downloadin…
Impact
An arbitrary file download vulnerability in the /c/PluginsController.php component of jizhi CMS 1.9.5 allows attackers to execute arbitrary code via downloading a crafted plugin.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jizhicms | Jizhicms | Version 1.9.5 |