CVE-2025-14013: JIZHICMS Comment addcomment.html cross site scripting
A vulnerability was identified in JIZHICMS up to 2.5.5. The impacted element is an unknown function of the file /index.php/admins/Comment/addcomment.html of the component Comment Handler. The manipulation of the argument body leads to cross site scripting. The attack may be initiated remotely. The exploit is publicly available and might be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-14013?
CVE-2025-14013 has been rated as a medium severity vulnerability due to the risk of cross-site scripting attacks.
How do I fix CVE-2025-14013?
To fix CVE-2025-14013, ensure you upgrade JIZHICMS to version 2.5.6 or later, which contains the necessary security patches.
What type of vulnerability is CVE-2025-14013?
CVE-2025-14013 is a cross-site scripting (XSS) vulnerability found in the Comment Handler component of JIZHICMS.
Who is affected by CVE-2025-14013?
Users of JIZHICMS versions up to 2.5.5 are affected by CVE-2025-14013.
What components are impacted by CVE-2025-14013?
CVE-2025-14013 impacts the Comment Handler component specifically related to the /index.php/admins/Comment/addcomment.html file.