CVE-2025-2638

CVE-2025-2638 affects JIZHICMS up to v1.7.0. The vulnerability resides in the Article Handler’s /user/release.html endpoint, where manipulating the ishot argument (e.g., input 1) leads to improper authorization. Exploitation can be performed remotely, and public disclosures exist. Multiple connec...