CVE-2023-31862

PoC —

CVSS 3.1

5.4 medium

EPSS

<1%p28

Published

May 19, 2023 (May 19, 2023)

Modified

Jun 17, 2026

Description

jizhicms v2.4.6 is vulnerable to Cross Site Scripting (XSS). The content of the article published in the front end is only filtered in the front end, without being filtered in the background, which allows attackers to publish an article containing malicious JavaScript scripts by modifying the request package.

Vendors: jizhicms
Products: jizhicms
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.3%)

In the news0 stories

No ingested article mentions this CVE yet.