Security Advisory

CVE-2023-38948

7.2
HIGH

Vulnerability Description

An arbitrary file download vulnerability in the /c/PluginsController.php component of jizhi CMS 1.9.5 allows attackers to execute arbitrary code via downloading a crafted plugin.
Published Date August 3, 2023
Official Source NIST NVD Advisory