3 matches found
Jeesns 1.4.2 - Cross-Site Scripting Detection
Jeesns 1.4.2 is vulnerable to reflected cross-site scripting in the /weibo/topic component and allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the system error message's text field. !/usr/bin/env python3 -- coding: utf-8 -- """Jeesns 1.""" from kittysploit impor...
CVE-2020-19295: Improper Neutralization of Input During Web Page Generation
A reflected cross-site scripting XSS vulnerability in the /weibo/topic component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML...
PT-2021-10335
Name of the Vulnerable Software and Affected Versions: Jeesns version 1.4.2 Description: A reflected cross-site scripting XSS issue in the "/weibo/topic" API endpoint allows attackers to execute arbitrary web scripts or HTML. This could potentially lead to unauthorized actions on behalf of the...