VYPR

jizhicms-order-idor

by Jizhicms

CVEs (1)

  • CVE-2026-116274MedOct 26, 2026
    risk 0.28cvss 4.3epss 0.00

    A vulnerability has been found in JIZHICMS up to 2.5.6. This affects the function Pay of the file app/home/c/OrderController.php of the component Front-end Order Handler. Such manipulation of the argument orderno leads to improper authorization. The attack can be launched…