Jizhicms v2.5.4 is vulnerable to Server-Side Request Forgery (SSRF) in User Evaluation, Message, and Comment modules.

Published Apr 9, 2026 · Updated Apr 14, 2026 · Assigned by mitre