CVE-2024-33338

Published April 29th, 2024

View on NVD ↗

CVSS v3

7.3

HIGH

CVSS v2

N/A

Affected

PROJECTS

Description

Cross Site Scripting vulnerability in jizhicms v.2.5.4 allows a remote attacker to obtain sensitive information via a crafted article publication request.

Cherry-toto/jizhicms

极致CMS（以下简称:JIZHICMS）是一款开源免费，无商业授权的建站系统。

GitHub

212

7akahash1/POC

GitHub