Description
JizhiCMS v2.5.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the component \c\PluginsController.php. This vulnerability allows attackers to perform an intranet scan via a crafted request.
Critical · 9.1
CVE-2025-25785
EUVD-2025-5359GHSA-xmg6-qg4m-gw97
JizhiCMS v2.5.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the component \c\PluginsController.php. This vulnerabili…
Published Feb 26, 2025 · Updated Jul 5, 2026 · Assigned by mitre