633 matches found
CVE-2023-50101
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via Label management editing...
CVE-2023-50100
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via carousel image editing...
CVE-2023-50137
CVE-2023-50137 : JFinalcms 5.0.0 is vulnerable to Cross-Site Scripting (XSS) in the site management office. The issue is documented across multiple feeds (NVD, Red Hat, Veracode, OSV, GHSA) with a base CVSS v3.1 score of 5.4 (Medium). The root cause is an XSS flaw in the site management office wh...
CVE-2023-50100
CVE-2023-50100 affects JFinalcms 5.0.0. The vulnerability is a Cross-Site Scripting (XSS) flaw exposed via the carousel image editing feature, caused by insufficient filtering/escaping of user-supplied data. Impact: an attacker can inject and execute arbitrary scripts in the victim’s browser. Exp...
CVE-2023-50101
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via Label management editing...
PT-2023-31474 · Jfinalcms · Jfinalcms
Name of the Vulnerable Software and Affected Versions: JFinalcms version 5.0.0 Description: The issue is related to Cross Site Scripting XSS, which is a type of security vulnerability that can allow an attacker to inject malicious scripts into a website. No information is provided about the...
CVE-2023-50102
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) due to insufficient input sanitization, enabling injection of malicious JavaScript into a user’s browser. Affected component is the web content handling in JFinalcms; the root cause is input sanitization gaps. The reports do not provide ...
CVE-2023-50137
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS in the site management office...
CVE-2023-50102
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS...
CVE-2023-50101
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via Label management editing...
JFinalCMS Cross-Site Scripting Vulnerability (CNVD-2023-9815407)
JFinalCMS is a content management system. JFinalCMS v5.0.0 version exists cross-site scripting vulnerability, the vulnerability stems from the lack of effective filtering and escaping of user-supplied data in the section management department, an attacker can exploit this vulnerability by injecti...
JFinalCMS Cross-Site Scripting Vulnerability (CNVD-2023-9769208)
JFinalCMS is a content management system. JFinalCMS v5.0.0 version exists cross-site scripting vulnerability, the vulnerability stems from the lack of effective filtering and escaping of user-supplied data in the navigation management department, an attacker exploits the vulnerability by injectin...
JFinalCMS Cross-Site Scripting Vulnerability (CNVD-2023-9773206)
JFinalCMS is a content management system. JFinalCMS suffers from a cross-site scripting vulnerability that stems from a lack of effective filtering and escaping of user-supplied data in the model management department, which can be exploited by an attacker to execute arbitrary Web script or HTML ...
Directory Traversal in JFinalCMS
JFinalCMS 5.0.0 could allow a remote attacker to read files via ../ Directory Traversal in the /common/down/file fileKey parameter...
GHSA-7X2G-4JVC-4X6P Directory Traversal in JFinalCMS
JFinalCMS 5.0.0 could allow a remote attacker to read files via ../ Directory Traversal in the /common/down/file fileKey parameter...
CVE-2023-50449
JFinalCMS 5.0.0 could allow a remote attacker to read files via ../ Directory Traversal in the /common/down/file fileKey parameter...
CVE-2023-50449
JFinalCMS 5.0.0 could allow a remote attacker to read files via ../ Directory Traversal in the /common/down/file fileKey parameter...
Directory traversal
JFinalCMS 5.0.0 could allow a remote attacker to read files via ../ Directory Traversal in the /common/down/file fileKey parameter...
CVE-2023-50449
Summary (CVE-2023-50449): JFinalCMS 5.0.0 is vulnerable to a remote directory traversal via the /common/down/file fileKey parameter, allowing reading of arbitrary files. Root cause: improper handling of the ../ path segment in the fileKey parameter. Documented by multiple sources (Red Hat, GHSA, ...
PT-2023-31555 · Jfinalcms · Jfinalcms
Name of the Vulnerable Software and Affected Versions: JFinalCMS version 5.0.0 Description: The issue allows a remote attacker to read files via ../ Directory Traversal in the "/common/down/file" fileKey parameter. This could potentially lead to unauthorized access to sensitive information...