188 matches found
Cross site scripting
A stored cross-site scripting XSS vulnerability in the /weibo/list component of Jeesns v2.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
CVE-2022-38550
A stored cross-site scripting XSS vulnerability in the /weibo/list component of Jeesns v2.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
CVE-2022-38550
Jeesns v2.0.0 contains a stored XSS in the /weibo/list component. The vulnerability allows an attacker to execute arbitrary web scripts or HTML via a crafted payload. Affected software: Jeesns 2.0.0 (Web UI component /weibo/list). Root cause: stored XSS in the mentioned component. Impact: potenti...
CVE-2022-38550
A stored cross-site scripting XSS vulnerability in the /weibo/list component of Jeesns v2.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...
JEESNS 跨站脚本漏洞
Fuzhou Lingxi Network Technology JEESNS is a social management system based on JAVA enterprise-level platform developed by China's Fuzhou Lingxi Network Technology Company. Relying on enterprise-level JAVA efficiency, security, stability and other advantages , to create a domestic JAVA version of...
PT-2022-24450 · Jeesns · Jeesns
Name of the Vulnerable Software and Affected Versions: Jeesns version 2.0.0 Description: A stored cross-site scripting XSS issue in the "/weibo/list" component allows attackers to execute arbitrary web scripts or HTML via a crafted payload. This can lead to the execution of malicious code on the...
JEESNS Reflective Cross-Site Scripting Vulnerability (CNVD-2021-74053)
JEESNS is a social management system developed on the JAVA enterprise platform. An attacker can use this vulnerability to execute arbitrary Web scripts or HTML...
JEESNS Stored Cross-Site Scripting Vulnerability (CNVD-2021-74062)
JEESNS is a social management system developed on the JAVA enterprise platform. The vulnerability can be exploited by attackers to execute arbitrary Web script or HTML via a specially crafted payload in the posted question...
JEESNS Stored Cross-Site Scripting Vulnerability (CNVD-2021-74051)
JEESNS is a social management system developed on the JAVA enterprise platform. The vulnerability can be exploited to execute arbitrary Web scripts or HTML via a specially crafted payload in the user name field...
JEESNS Stored Cross-Site Scripting Vulnerability (CNVD-2021-74056)
JEESNS is a social management system developed on the JAVA enterprise platform. The vulnerability can be exploited to execute arbitrary Web script or HTML via a specially crafted payload in the editor's source field...
JEESNS Cross-site Request Forgery Vulnerability
JEESNS is a social management system developed on the JAVA enterprise platform. JEESNS version 1.4.2 is vulnerable to cross-site request forgery. An attacker can use this vulnerability to elevate privileges and perform sensitive program operations...
JEESNS Reflective Cross-Site Scripting Vulnerability (CNVD-2021-74052)
JEESNS is a social management system developed on the JAVA enterprise platform. The vulnerability can be exploited to execute arbitrary Web scripts or HTML via the system error message text field...
JEESNS Stored Cross-Site Scripting Vulnerability (CNVD-2021-74054)
JEESNS is a social management system developed on the JAVA enterprise platform. The vulnerability can be exploited to execute arbitrary Web script or HTML via a specially crafted payload in the "group comment" text field...
JEESNS Stored Cross-Site Scripting Vulnerability (CNVD-2021-74058)
JEESNS is a social management system developed on the JAVA enterprise platform. The vulnerability can be exploited to execute arbitrary Web script or HTML via a specially crafted payload in a private message...
JEESNS stored cross-site scripting vulnerability (CNVD-2021-74059)
JEESNS is a social management system developed on JAVA's enterprise-level platform. A stored cross-site scripting vulnerability exists in the /member/picture/album component in JEESNS version 1.4.2. The vulnerability can be exploited to execute arbitrary web script or HTML via a specially crafted...
JEESNS Stored Cross-Site Scripting Vulnerability (CNVD-2021-74057)
JEESNS is a social management system developed on the JAVA enterprise platform. The vulnerability can be exploited to execute arbitrary Web script or HTML via a specially crafted payload in the header...
JEESNS Stored Cross-Site Scripting Vulnerability (CNVD-2021-74060)
JEESNS is a social management system developed on the JAVA enterprise platform. The vulnerability can be exploited to execute arbitrary web script or HTML via a specially crafted payload in the comments section of Weibo...
JEESNS Stored Cross-Site Scripting Vulnerability (CNVD-2021-74055)
JEESNS is a social management system developed on the JAVA enterprise platform. The vulnerability can be exploited to execute arbitrary Web script or HTML via a specially crafted payload in the "name" text field...
JEESNS Stored Cross-Site Scripting Vulnerability (CNVD-2021-74063)
JEESNS is a social management system developed on the JAVA enterprise platform. The vulnerability can be exploited to execute arbitrary Web script or HTML via a specially crafted payload in published articles...
JEESNS Reflective Cross-Site Scripting Vulnerability
JEESNS is a social management system developed on the JAVA enterprise platform. An attacker can use this vulnerability to execute arbitrary Web scripts or HTML...