j
jizhicms
Security Risk Profile
43
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 41 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from October 14, 2019 to present
41
Total CVEs
26
Critical+High
0
Exploited
26
Unpatched
Threat Assessment
Avg CVSS
7.5
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
26
Critical/High
Risk Level
43/100
medium
🆕 1Fresh (<7d)📈 1 in Last 30 Days
Severity Distribution
Critical
12High
14Medium
14Low
1Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
10Age Distribution
Common Weaknesses (CWE)
1
SQL Injection
11
2
XSS
8
3
SSRF
6
4
Malicious File Upload
6
5
CSRF
4
Most Affected Products
1. Jizhicms JIZHICMS58
Recent Vulnerabilities
See more →CVE-2026-116274
CVSS 4.3medium
JIZHICMS Front-end Order OrderController.php pay improper authorization
Oct 26, 2026🔧 No Patch
CVE-2026-6978
CVSS 2.0EPSS 0%low
JiZhiCMS addcache.html htmlspecialchars_decode sql injection
Apr 25, 2026🔧 No Patch
CVE-2025-50229
CVSS 9.8critical
Apr 23, 2026🔧 No Patch
CVE-2025-50228
CVSS 9.1critical
Apr 9, 2026🔧 No Patch
CVE-2026-29840
CVSS 5.4medium
Mar 24, 2026🔧 No Patch
CVE-2026-3292
CVSS 5.3EPSS 0%medium
jizhiCMS Batch Model.php findAll sql injection
Feb 27, 2026🔧 No Patch
CVE-2025-70397
CVSS 7.2high
Feb 17, 2026🔧 No Patch
CVE-2020-37117
CVSS 8.8high
jizhiCMS 1.6.7 - Arbitrary File Download
Feb 5, 2026🔧 No Patch
CVE-2025-14013
CVSS 4.8medium
JIZHICMS Comment addcomment.html cross site scripting
Dec 4, 2025🔧 No Patch
CVE-2025-14012
CVSS 7.2high
JIZHICMS Batch Delete Comments deleteAll.html delete sql injection
Dec 4, 2025🔧 No Patch
Monitor jizhicms in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.