CVE-2020-23644

XSS exists in JIZHICMS 1.7.1 via index.php/Error/index?msg=XSS to Home/c/ErrorController.php...

CVE-2020-23644

JIZHICMS 1.7.1 is affected by a Cross-Site Scripting vulnerability introduced via index.php/Error/index?msg={XSS] in Home/c/ErrorController.php. Public triage documents (Red Hat, CNVD, OSV, CVE list, ENISA EUVD-2020-16387) confirm the issue with the same vector across multiple sources. The exact ...