CVE-2025-25785

Published: 2025-02-26T15:15Z

Last Modified: 2025-04-10T17:38Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

JizhiCMS v2.5.4 was discovered to contain a Server-Side Request Forgery (SSRF) via the component \c\PluginsController.php. This vulnerability allows attackers to perform an intranet scan via a crafted request. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt