6.3
Medium
CVE-2023-2927 A vulnerability was found in JIZHICMS 2.4.5
Description
A vulnerability was found in JIZHICMS 2.4.5. It has been classified as critical. Affected is the function index of the file TemplateController.php. The manipulation of the argument webapi leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-230082 is the identifier assigned to this vulnerability.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| JIZHICMS | 2.4.5 | No fix stated |
Other CVEs of JIZHICMS
The 10 CVEs of JIZHICMS →
CVE-2026-116274
A vulnerability has been found in JIZHICMS up to 2.5.6
5.3
Medium
CVE-2026-6978
A vulnerability was detected in JiZhiCMS up to 2.5.6
5.1
Medium
CVE-2026-3292
A security vulnerability has been detected in jizhiCMS up to 2.5.6
5.3
Medium
CVE-2025-14013
A vulnerability was identified in JIZHICMS up to 2.5.5
4.8
Medium