CVE-2020-21228: Jizhicms

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

JIZHICMS 1.5.1 contains a cross-site scripting (XSS) vulnerability in the component /user/release.html, which allows attackers to arbitrarily add an administrator cookie.

Affected products

• Jizhicms Jizhicms: version 1.5.1 only

Published 2021-10-01. Last modified 2026-07-09.