CVE-2026-29840:详情

CVE-2026-29840

5.4
/
中危
0.05%V4
2026-03-24
16h16 +00:00
Cross-site Scripting
A03-Injection
Network
2026-03-25
20h49 +00:00
指定 CVE 通知
随时了解指定 CVE 的变更。
管理通知

CVE 描述

JiZhiCMS v2.5.6 and before contains a Stored Cross-Site Scripting (XSS) vulnerability in the release function within app/home/c/UserController.php. The application attempts to sanitize input by filtering

相关产品

配置 0

Jizhicms>>Jizhicms >> Version 至(含) 2.5.6

参考资料