CVE-2025-14013

The CVE-2025-14013 entry affects JIZHICMS up to version 2.5.5, specifically the Comment Handler’s file /index.php/admins/Comment/addcomment.html. The issue is a cross-site scripting vulnerability caused by manipulation of the body parameter, with remote initiation possible and a public exploit av...

PT-2025-49104

Name of the Vulnerable Software and Affected Versions JIZHICMS versions up to 2.5.5 Description A flaw exists in JIZHICMS that allows for SQL injection. This issue is located in the commentlist function within the /index.php/admins/Comment/addcomment.html file of the Add Display Name Field...