CVE-2025-25785

JizhiCMS v2.5.4 was discovered to contain a Server-Side Request Forgery SSRF via the component \c\PluginsController.php. This vulnerability allows attackers to perform an intranet scan via a crafted request...

CVE-2025-25785

JizhiCMS version v2.5.4 contains a Server-Side Request Forgery (SSRF) vulnerability within the PluginsController.php component. This flaw allows an attacker to perform an intranet scan by sending a crafted request. Practical impact includes unauthorized internal network discovery. As a temporary ...