critical9.8
CVE-2023-51154
Jizhicms v2.5 was discovered to contain an arbitrary file download vulnerability via the component /admin/c/PluginsController.php.
Impact
Jizhicms v2.5 was discovered to contain an arbitrary file download vulnerability via the component /admin/c/PluginsController.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jizhicms | Jizhicms | Version 2.5.0 |