CVE-2020-21228

2021-10-0121:15:07

Google

osv.dev

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.6%

JSON

JIZHICMS 1.5.1 contains a cross-site scripting (XSS) vulnerability in the component /user/release.html, which allows attackers to arbitrarily add an administrator cookie.

CPENameOperatorVersion
jizhicmseq1.5
jizhicmseq1.4
jizhicmseq1.5.1

Name	Operator	Version
jizhicms	eq	1.5
jizhicms	eq	1.4
jizhicms	eq	1.5.1

References

jizhicms.com

github.com/Cherry-toto/jizhicms

github.com/Cherry-toto/jizhicms/issues/16