Jizhicms v2.5 was discovered to contain an arbitrary file download vulnerability via the component /admin/c/PluginsController.php.

Published Jan 4, 2024 · Updated Jun 18, 2025 · Assigned by mitre