Lucene search
+L

188 matches found

Prion
Prion
added 2022/09/19 11:15 p.m.16 views

Cross site scripting

A stored cross-site scripting XSS vulnerability in the /weibo/list component of Jeesns v2.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

4.9CVSS5.2AI score0.00394EPSS
Exploits1References1Affected Software1
Vulnrichment
Vulnrichment
added 2022/09/19 10:51 p.m.7 views

CVE-2022-38550

A stored cross-site scripting XSS vulnerability in the /weibo/list component of Jeesns v2.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

5.6AI score0.00394EPSS
Exploits1References1
CVE
CVE
added 2022/09/19 10:51 p.m.51 views

CVE-2022-38550

Jeesns v2.0.0 contains a stored XSS in the /weibo/list component. The vulnerability allows an attacker to execute arbitrary web scripts or HTML via a crafted payload. Affected software: Jeesns 2.0.0 (Web UI component /weibo/list). Root cause: stored XSS in the mentioned component. Impact: potenti...

5.4CVSS5.2AI score0.00394EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2022/09/19 10:51 p.m.22 views

CVE-2022-38550

A stored cross-site scripting XSS vulnerability in the /weibo/list component of Jeesns v2.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

5.4AI score0.00394EPSS
Exploits1References1
CNNVD
CNNVD
added 2022/09/19 12:0 a.m.5 views

JEESNS 跨站脚本漏洞

Fuzhou Lingxi Network Technology JEESNS is a social management system based on JAVA enterprise-level platform developed by China's Fuzhou Lingxi Network Technology Company. Relying on enterprise-level JAVA efficiency, security, stability and other advantages , to create a domestic JAVA version of...

5.4CVSS6AI score0.00394EPSS
Exploits1References3
Positive Technologies
Positive Technologies
added 2022/09/19 12:0 a.m.7 views

PT-2022-24450 · Jeesns · Jeesns

Name of the Vulnerable Software and Affected Versions: Jeesns version 2.0.0 Description: A stored cross-site scripting XSS issue in the "/weibo/list" component allows attackers to execute arbitrary web scripts or HTML via a crafted payload. This can lead to the execution of malicious code on the...

5.4CVSS5.6AI score0.00394EPSS
Exploits1References4
CNVD
CNVD
added 2021/09/10 12:0 a.m.14 views

JEESNS Reflective Cross-Site Scripting Vulnerability (CNVD-2021-74053)

JEESNS is a social management system developed on the JAVA enterprise platform. An attacker can use this vulnerability to execute arbitrary Web scripts or HTML...

6.1CVSS2AI score0.02633EPSS
Exploits1References1
CNVD
CNVD
added 2021/09/10 12:0 a.m.15 views

JEESNS Stored Cross-Site Scripting Vulnerability (CNVD-2021-74062)

JEESNS is a social management system developed on the JAVA enterprise platform. The vulnerability can be exploited by attackers to execute arbitrary Web script or HTML via a specially crafted payload in the posted question...

5.4CVSS3.3AI score0.00558EPSS
Exploits1References1
CNVD
CNVD
added 2021/09/10 12:0 a.m.14 views

JEESNS Stored Cross-Site Scripting Vulnerability (CNVD-2021-74051)

JEESNS is a social management system developed on the JAVA enterprise platform. The vulnerability can be exploited to execute arbitrary Web scripts or HTML via a specially crafted payload in the user name field...

5.4CVSS1.8AI score0.00558EPSS
Exploits1References1
CNVD
CNVD
added 2021/09/10 12:0 a.m.18 views

JEESNS Stored Cross-Site Scripting Vulnerability (CNVD-2021-74056)

JEESNS is a social management system developed on the JAVA enterprise platform. The vulnerability can be exploited to execute arbitrary Web script or HTML via a specially crafted payload in the editor's source field...

5.4CVSS1.6AI score0.00558EPSS
Exploits1References1
CNVD
CNVD
added 2021/09/10 12:0 a.m.17 views

JEESNS Cross-site Request Forgery Vulnerability

JEESNS is a social management system developed on the JAVA enterprise platform. JEESNS version 1.4.2 is vulnerable to cross-site request forgery. An attacker can use this vulnerability to elevate privileges and perform sensitive program operations...

8.8CVSS4.9AI score0.0091EPSS
Exploits1References1
CNVD
CNVD
added 2021/09/10 12:0 a.m.21 views

JEESNS Reflective Cross-Site Scripting Vulnerability (CNVD-2021-74052)

JEESNS is a social management system developed on the JAVA enterprise platform. The vulnerability can be exploited to execute arbitrary Web scripts or HTML via the system error message text field...

6.1CVSS1.7AI score0.03162EPSS
Exploits1References1
CNVD
CNVD
added 2021/09/10 12:0 a.m.22 views

JEESNS Stored Cross-Site Scripting Vulnerability (CNVD-2021-74054)

JEESNS is a social management system developed on the JAVA enterprise platform. The vulnerability can be exploited to execute arbitrary Web script or HTML via a specially crafted payload in the "group comment" text field...

5.4CVSS1.5AI score0.00545EPSS
Exploits1References1
CNVD
CNVD
added 2021/09/10 12:0 a.m.16 views

JEESNS Stored Cross-Site Scripting Vulnerability (CNVD-2021-74058)

JEESNS is a social management system developed on the JAVA enterprise platform. The vulnerability can be exploited to execute arbitrary Web script or HTML via a specially crafted payload in a private message...

5.4CVSS1.6AI score0.00545EPSS
Exploits1References1
CNVD
CNVD
added 2021/09/10 12:0 a.m.19 views

JEESNS stored cross-site scripting vulnerability (CNVD-2021-74059)

JEESNS is a social management system developed on JAVA's enterprise-level platform. A stored cross-site scripting vulnerability exists in the /member/picture/album component in JEESNS version 1.4.2. The vulnerability can be exploited to execute arbitrary web script or HTML via a specially crafted...

5.4CVSS5.3AI score0.0066EPSS
Exploits1References1
CNVD
CNVD
added 2021/09/10 12:0 a.m.14 views

JEESNS Stored Cross-Site Scripting Vulnerability (CNVD-2021-74057)

JEESNS is a social management system developed on the JAVA enterprise platform. The vulnerability can be exploited to execute arbitrary Web script or HTML via a specially crafted payload in the header...

5.4CVSS1.5AI score0.00687EPSS
Exploits1References1
CNVD
CNVD
added 2021/09/10 12:0 a.m.14 views

JEESNS Stored Cross-Site Scripting Vulnerability (CNVD-2021-74060)

JEESNS is a social management system developed on the JAVA enterprise platform. The vulnerability can be exploited to execute arbitrary web script or HTML via a specially crafted payload in the comments section of Weibo...

5.4CVSS2.1AI score0.00545EPSS
Exploits1References1
CNVD
CNVD
added 2021/09/10 12:0 a.m.20 views

JEESNS Stored Cross-Site Scripting Vulnerability (CNVD-2021-74055)

JEESNS is a social management system developed on the JAVA enterprise platform. The vulnerability can be exploited to execute arbitrary Web script or HTML via a specially crafted payload in the "name" text field...

5.4CVSS1.7AI score0.0066EPSS
Exploits1References1
CNVD
CNVD
added 2021/09/10 12:0 a.m.13 views

JEESNS Stored Cross-Site Scripting Vulnerability (CNVD-2021-74063)

JEESNS is a social management system developed on the JAVA enterprise platform. The vulnerability can be exploited to execute arbitrary Web script or HTML via a specially crafted payload in published articles...

5.4CVSS1.6AI score0.00558EPSS
Exploits1References1
CNVD
CNVD
added 2021/09/10 12:0 a.m.14 views

JEESNS Reflective Cross-Site Scripting Vulnerability

JEESNS is a social management system developed on the JAVA enterprise platform. An attacker can use this vulnerability to execute arbitrary Web scripts or HTML...

6.1CVSS2AI score0.03509EPSS
Exploits1References1
Rows per page
Query Builder