CVE-2025-50229

Impact

Jizhicms v2.5.4 is vulnerable to SQL injection in the product editing module.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• http://jizhicms.cn
• https://gist.github.com/4iFei/14ad89c3b44348dd575bf5ae0ed5a19c
• https://github.com/Cherry-toto/jizhicms
• https://github.com/Cherry-toto/jizhicms/issues/105