CVE-2026-29840:詳細資料

CVE-2026-29840

5.4
/
中危
0.05%V4
2026-03-24
16h16 +00:00
Cross-site Scripting
A03-Injection
Network
2026-03-25
20h49 +00:00
指定 CVE 通知
掌握特定 CVE 的任何變更。
管理通知

CVE 描述

JiZhiCMS v2.5.6 and before contains a Stored Cross-Site Scripting (XSS) vulnerability in the release function within app/home/c/UserController.php. The application attempts to sanitize input by filtering

相關產品

設定 0

Jizhicms>>Jizhicms >> Version 至(含) 2.5.6

參考資料