531 matches found
Cross site scripting
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via Label management editing...
Cross site scripting
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS in the site management office...
Cross site scripting
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS...
JFinalCMS Cross-Site Scripting Vulnerability
JFinalCMS is a content management system by heyewei Personal Developer. A cross-site scripting vulnerability exists in JFinalCMS version 5.0.0, which stems from a cross-site scripting XSS vulnerability in the Label management editing...
PT-2023-31472 · Jfinalcms · Jfinalcms
Name of the Vulnerable Software and Affected Versions: JFinalcms version 5.0.0 Description: The issue is related to Cross Site Scripting XSS via carousel image editing. This means that an attacker could potentially inject malicious scripts into the website, which would then be executed by the...
CVE-2023-50101
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via Label management editing...
JFinal 跨站脚本漏洞
JFinalCMS is a content management system. JFinalCMS version 5.0.0 cross-site scripting vulnerability, the vulnerability stems from the carousel image editing of user-supplied data lack of effective filtering and escaping, the vulnerability can be exploited by an attacker by injecting a...
PT-2023-31481 · Jfinalcms · Jfinalcms
Name of the Vulnerable Software and Affected Versions: JFinalcms version 5.0.0 Description: The issue is related to Cross Site Scripting XSS in the site management office. This means an attacker could potentially inject malicious scripts into the website, affecting users who visit the site...
PT-2023-31474 · Jfinalcms · Jfinalcms
Name of the Vulnerable Software and Affected Versions: JFinalcms version 5.0.0 Description: The issue is related to Cross Site Scripting XSS, which is a type of security vulnerability that can allow an attacker to inject malicious scripts into a website. No information is provided about the...
CVE-2023-50102
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS...
CVE-2023-50101
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via Label management editing...
CVE-2023-50100
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via carousel image editing...
CVE-2023-50100
CVE-2023-50100 affects JFinalcms 5.0.0. The vulnerability is a Cross-Site Scripting (XSS) flaw exposed via the carousel image editing feature, caused by insufficient filtering/escaping of user-supplied data. Impact: an attacker can inject and execute arbitrary scripts in the victim’s browser. Exp...
CVE-2023-50101
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via Label management editing...
CVE-2023-50102
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) due to insufficient input sanitization, enabling injection of malicious JavaScript into a user’s browser. Affected component is the web content handling in JFinalcms; the root cause is input sanitization gaps. The reports do not provide ...
JFinalCMS Cross-Site Scripting Vulnerability
JFinalCMS is a content management system by heyewei Personal Developer. A cross-site scripting vulnerability exists in JFinalCMS version 5.0.0, which stems from a cross-site scripting XSS vulnerability in the site management office...
JFinalCMS Cross-Site Scripting Vulnerability
JFinalCMS is a content management system by heyewei individual developer. A cross-site scripting vulnerability exists in JFinalCMS version 5.0.0, which stems from a cross-site scripting XSS vulnerability in Content data...
CVE-2023-50137
CVE-2023-50137 : JFinalcms 5.0.0 is vulnerable to Cross-Site Scripting (XSS) in the site management office. The issue is documented across multiple feeds (NVD, Red Hat, Veracode, OSV, GHSA) with a base CVSS v3.1 score of 5.4 (Medium). The root cause is an XSS flaw in the site management office wh...