CVE-2022-45278

Jizhicms v2.3.3 was discovered to contain a SQL injection vulnerability via the /index.php/admins/Fields/get_fields.html component.

Score

CVSS 3.1 8.8 High

Status

Modified - cve@mitre.org

Published

2022-11-23

Last modified

2025-04-25

Weaknesses

CWE-89

Affected products

• Jizhicms (Jizhicms)

References

• https://github.com/Cherry-toto/jizhicms/issues/83