← Database

CVE-2026-29840

MEDIUM CVSS: 5.4 Published: 2026-03-24 Modified: 2026-06-17

Description

JiZhiCMS v2.5.6 and before contains a Stored Cross-Site Scripting (XSS) vulnerability in the release function within app/home/c/UserController.php. The application attempts to sanitize input by filtering