A vulnerability classified as critical was found in Jizhicms 2.5.4. The affected element is an unknown function of the component Product Editing Module. Such manipulation leads to sql injection.

This vulnerability is documented as CVE-2025-50229. The attack can be executed remotely. There is not any exploit available.