CVE-2025-14013 JIZHICMS Comment addcomment.html cross site scripting

A vulnerability was identified in JIZHICMS up to 2.5.5. The impacted element is an unknown function of the file /index.php/admins/Comment/addcomment.html of the component Comment Handler. The manipulation of the argument body leads to cross site scripting. The attack may be initiated remotely. Th...

JIZHICMS SQL Injection Vulnerability

JIZHICMS Jizhi CMS is an open source content management system CMS from China Jizhi JIZHI. A SQL injection vulnerability exists in JIZHICMS 2.5.5 and earlier versions, which stems from incorrect manipulation of the parameter aid/tid in the file /index.php/admins/Comment/addcomment.html, which may...

PT-2025-49106

Name of the Vulnerable Software and Affected Versions JIZHICMS versions up to 2.5.5 Description A flaw exists in JIZHICMS that allows for cross site scripting. The issue is located in the Comment Handler component, specifically within the file /index.php/admins/Comment/addcomment.html. Manipulati...