A security vulnerability has been detected in jizhiCMS up to 2.5.6.

Code

The project this record applies to. Exploit listings stay in References.

No public source repository is identified for this product.

Timeline

Detection, updates, and resolution for this record.

1. Feb 27, 2026 · NIST NVD

   Detected

   A security vulnerability has been detected in jizhiCMS up to 2.5.6. Affected is the function findAll in the library frphp/lib/Model.php of the component Batch Interface. The manipulation of the argument data leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did

2. Jun 17, 2026 · NIST NVD

   Updated

   A security vulnerability has been detected in jizhiCMS up to 2.5.6. Affected is the function findAll in the library frphp/lib/Model.php of the component Batch Interface. The manipulation of the argument data leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did

Affected

• cpe jizhicms/jizhicmsversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-3292

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-3292

  A security vulnerability has been detected in jizhiCMS up to 2.5.6. Affected is the function findAll in the library frphp/lib/Model.php of the component Batch Interface. The manipulation of the argument data leads to sql injection. The attack is possible to be carried out remotel

  nvd.nist.gov

References

• Exploit · gist.github.com
• Permissions Required · vuldb.com
• Third Party Advisory · vuldb.com
• Third Party Advisory · vuldb.com