CVE-2024-34255: Jizhicms

Medium severity, CVSS 6.1. EPSS: 0.3% chance of exploitation in the next 30 days.

jizhicms v2.5.1 contains a Cross-Site Scripting(XSS) vulnerability in the message function.

Affected products

• Jizhicms Jizhicms: version 2.5.1 only

Published 2024-05-08. Last modified 2026-06-17.