jizhicms 2.5.6 is vulnerable to SQL Injection in Article/deleteAll and Extmolds/deleteAll via the data parameter.

Published Feb 17, 2026 · Updated Jul 5, 2026 · Assigned by mitre