CVE-2020-23643

XSS exists in JIZHICMS 1.7.1 via index.php/Wechat/checkWeixin?signature=1&echostr=XSS to Home/c/WechatController.php...

CVE-2020-23643: Improper Neutralization of Input During Web Page Generation

XSS exists in JIZHICMS 1.7.1 via index.php/Wechat/checkWeixin?signature=1&echostr=XSS to Home/c/WechatController.php...

PT-2021-10920

Name of the Vulnerable Software and Affected Versions JIZHICMS version 1.7.1 Description A security issue exists where an attacker can inject malicious code. The issue is related to the "index.php/Wechat/checkWeixin" API endpoint, specifically with the signature and echostr parameters, where an...