Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-74066
HistoryMay 12, 2021 - 12:00 a.m.

JEESNS Cross-Site Scripting Vulnerability

2021-05-1200:00:00
China National Vulnerability Database
www.cnvd.org.cn
3

0.001 Low

EPSS

Percentile

48.1%

JEESNS is a social management system based on the JAVA enterprise-level platform. JEESNS is vulnerable to cross-site scripting, which allows remote attackers to execute arbitrary code by injecting commands into the " CKEditorFuncNum" parameter to execute arbitrary code.

CPENameOperatorVersion
jeesns jeesnseq1.4.2

0.001 Low

EPSS

Percentile

48.1%

Related for CNVD-2021-74066