CVE-2023-27234 Information

Description

A Cross-Site Request Forgery (CSRF) in /Sys/index.html of Jizhicms v2.4.5 allows attackers to arbitrarily make configuration changes within the application.

Reference

https://github.com/Cherry-toto/jizhicms/issues/85