CVE-2020-21228

CVE-2020-21228

EPSS 1.0%

JIZHICMS 1.5.1 contains a cross-site scripting (XSS) vulnerability in the component /user/release.html, which allows attackers to arbitrarily add an administrator cookie.

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

http://jizhicms.com https://github.com/Cherry-toto/jizhicms https://github.com/Cherry-toto/jizhicms/issues/16