Filtered by vendor Jizhicms Subscriptions
Filtered by product Jizhicms Subscriptions
Total 23 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2020-21483 1 Jizhicms 1 Jizhicms 2024-11-21 7.2 High
An arbitrary file upload vulnerability in Jizhicms v1.5 allows attackers to execute arbitrary code via a crafted .jpg file which is later changed to a PHP file.
CVE-2020-21228 1 Jizhicms 1 Jizhicms 2024-11-21 6.1 Medium
JIZHICMS 1.5.1 contains a cross-site scripting (XSS) vulnerability in the component /user/release.html, which allows attackers to arbitrarily add an administrator cookie.
CVE-2019-17593 1 Jizhicms 1 Jizhicms 2024-11-21 8.8 High
JIZHICMS 1.5.1 allows admin.php/Admin/adminadd.html CSRF to add an administrator.