CVE-2024-33338: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in jizhicms v.2.5.4 allows a remote attacker to obtain sensitive information via a crafted article publication request...

CVE-2024-33338

Cross Site Scripting vulnerability in jizhicms v.2.5.4 allows a remote attacker to obtain sensitive information via a crafted article publication request...

CVE-2024-33338

The jizhicms version v.2.5.4 (an open-source content management system) is vulnerable to a Cross Site Scripting (XSS) flaw. A remote attacker can exploit this by sending a specially crafted article publication request to obtain sensitive information. At this time, no newer version containing a fi...