CVE-2025-50228

Published April 9th, 2026

View on NVD ↗

CVSS v3

9.1

CRITICAL

CVSS v2

N/A

Affected

1

PROJECT

Description

Jizhicms v2.5.4 is vulnerable to Server-Side Request Forgery (SSRF) in User Evaluation, Message, and Comment modules.

Cherry-toto/jizhicms

极致CMS（以下简称:JIZHICMS）是一款开源免费，无商业授权的建站系统。

GitHub

212