CVE-2023-51154: Exposure of Sensitive Information to an Unauthorized Actor

Jizhicms v2.5 was discovered to contain an arbitrary file download vulnerability via the component /admin/c/PluginsController.php...