CVE-2020-21228 – JIZHICMS 1.5.1 contains a cross-site scripting (XSS) vulnerability in the

4 years ago

JIZHICMS 1.5.1 contains a cross-site scripting (XSS) vulnerability in the component /user/release.html, which allows attackers to arbitrarily add an administrator cookie.

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-21228

Reference (s):

http://jizhicms.com
https://github.com/Cherry-toto/jizhicms
https://github.com/Cherry-toto/jizhicms/issues/16