CVE-2020-21228

MediumCVSS 6.1

Published: 01/10/2021(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

0.78%

51th percentile - higher than 51% of all known CVEs

Summary

JIZHICMS 1.5.1 contains a cross-site scripting (XSS) vulnerability in the /user/release.html component, allowing attackers to arbitrarily add an administrator cookie.

Risk Assessment

An attacker can hijack an administrator session, gaining full control over the CMS system, leading to data theft and unauthorized changes.

Recommendation

Immediately update JIZHICMS to the latest version and apply input filtering and encoding in the /user/release.html component.

Original NVD description (English source)

JIZHICMS 1.5.1 contains a cross-site scripting (XSS) vulnerability in the component /user/release.html, which allows attackers to arbitrarily add an administrator cookie.