Jizhicms v2.3.3 was discovered to contain a SQL injection vulnerability via the /index.php/admins/Fields/get_fields.html component.Referenceshttps://github.com/Cherry-toto/jizhicms/issues/83