CVE-2023-27234

Published March 15th, 2023

View on NVD ↗

CVSS v3

6.5

MEDIUM

CVSS v2

N/A

Affected

PROJECT

Description

A Cross-Site Request Forgery (CSRF) in /Sys/index.html of Jizhicms v2.4.5 allows attackers to arbitrarily make configuration changes within the application.

Cherry-toto/jizhicms

极致CMS（以下简称:JIZHICMS）是一款开源免费，无商业授权的建站系统。

GitHub

212