CVE-2025-70397

jizhicms 2.5.6 is vulnerable to SQL Injection in Article/deleteAll and Extmolds/deleteAll via the data parameter.

Score

CVSS 3.1 7.2 High

Status

Modified - cve@mitre.org

Published

2026-02-17

Last modified

2026-07-05

Weaknesses

CWE-89

Affected products

• Jizhicms (Jizhicms)

References

• https://www.23882.me/index.php/2026/02/15/jizhicms-%e5%90%8e%e5%8f%b0%e5%ad%98%e5%9c%a8sql%e6%b3%a8%e5%85%a5/