CVE-2024-22497

2024-01-2300:00:00

mitre

raw.githubusercontent.com

xss

jfinalcms

5.0.0

arbitrary code

crafted url

6.2 Medium

AI Score

Confidence

High

0.0005 Low

EPSS

Percentile

16.1%

JSON

Cross Site Scripting (XSS) vulnerability in /admin/login password parameter in JFinalcms 5.0.0 allows attackers to run arbitrary code via crafted URL.