Lucene search
K

CVE-2024-22492

🗓️ 12 Jan 2024 00:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 34 Views🌐 WEB

Stored XSS vuln in JFinalcms 5.0.0 via /guestbook/save contact parameter

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
Circl
CVE-2024-22492
12 Jan 202417:31
circl
CNNVD
JFinalCMS Cross-Site Scripting Vulnerability
12 Jan 202400:00
cnnvd
Cvelist
CVE-2024-22492
12 Jan 202400:00
cvelist
EUVD
EUVD-2024-0291
3 Oct 202520:07
euvd
Github Security Blog
Cross-site Scripting in JFinal
12 Jan 202418:30
github
NVD
CVE-2024-22492
12 Jan 202416:15
nvd
OSV
GHSA-859H-4W58-78XW Cross-site Scripting in JFinal
12 Jan 202418:30
osv
Prion
Cross site scripting
12 Jan 202416:15
prion
RedhatCVE
CVE-2024-22492
23 May 202509:35
redhatcve
vulnersOsv
cc.ecore:spring-jfinal (=0.0.1), cc.ecore:spring-jfinal-plugin (>=0.1.0 <=0.1.2) +164 more potentially affected by CVE-2024-22492 via com.jfinal:jfinal (>=1.4 <=5.0.0)
12 Jan 202418:30
vulnersosv
Rows per page
NVD
ParameterPositionPathDescriptionCWE
contactrequest bodygusetbook/saveStored XSS via guestbook save endpoint parameter allowing injection of script/HTMLCWE-79

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

03 Jun 2025 14:15Current
5.2Medium risk
Vulners AI Score5.2
CVSS 3.15.4
EPSS0.00127
SSVC
34