CVE-2024-22494

creationtimestamp| type| source ---|---|--- 2024-01-12 17:31:58+00:00| seen| https://t.me/ctinow/167407 2024-01-18 23:17:10+00:00| seen| https://t.me/ctinow/169993 2024-02-02 20:46:44+00:00| seen| https://t.me/ctinow/178264...

CVE-2024-22494

A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save mobile parameter, which allows remote attackers to inject arbitrary web script or HTML...

CVE-2024-22494

A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save mobile parameter, which allows remote attackers to inject arbitrary web script or HTML...

CVE-2024-22494

CVE-2024-22494 is a stored XSS in JFinalcms 5.0.0 exploited via the /gusetbook/save mobile parameter. The vulnerability allows remote attackers to inject arbitrary web script or HTML into victims’ browsers due to improper input handling of the mobile field. Public details in the provided document...