Cherry-toto CVEs and Security Vulnerabilities - OpenCVE

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

CVE-2025-50228

Jizhicms v2.5.4 is vulnerable to Server-Side Request Forgery (SSRF) in User Evaluation, Message, and Comment modules.

CVSS 3.1 · 9.1 Critical EPSS < 1% KEV · Not listed

Vendors

Cherry-toto Jizhicms

Products

Jizhicms Jizhicms

CVE-2024-34255

jizhicms v2.5.1 contains a Cross-Site Scripting(XSS) vulnerability in the message function.

CVSS 3.1 · 6.1 Medium EPSS < 1% KEV · Not listed

Vendors

Cherry-toto Jizhicms

Products

Jizhicms Jizhicms

Page 1 of 1.