← All advisories

Medium severity6.1NVD Advisory· Published May 8, 2024· Updated Jun 17, 2026

CVE-2024-34255

CVE-2024-34255

Description

jizhicms v2.5.1 contains a Cross-Site Scripting(XSS) vulnerability in the message function.

Affected products

3

Jizhicms/Jizhicms2 versions
cpe:2.3:a:jizhicms:jizhicms:2.5.1:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:jizhicms:jizhicms:2.5.1:*:*:*:*:*:*:*
- (no CPE)
Cherry Toto/jizhicmsllm-fuzzy
Range: =2.5.1

Patches

Vulnerability mechanics

References

1

github.com/Cherry-toto/jizhicms/issues/93nvdExploitIssue Tracking

News mentions

0

No linked articles in our index yet.