47 matches found
CVE-2021-46087: Improper Neutralization of Input During Web Page Generation
In jfinalcms = 5.1 0, there is a storage XSS vulnerability in the background system of CMS. Because developers do not filter the parameters submitted by the user input form, any user with background permission can affect the system security by entering malicious code...
CVE-2021-37262
JFinalcms 5.1.0 is vulnerable to regex injection that may lead to Denial of Service...
CVE-2021-37262
JFinalcms 5.1.0 is vulnerable to regex injection that may lead to Denial of Service...
Design/Logic Flaw
JFinalcms 5.1.0 is vulnerable to regex injection that may lead to Denial of Service...
CVE-2021-37262
CVE-2021-37262 affects JFinal_cms 5.1.0. The vulnerability is a regex injection in handling user input, leading to Denial of Service. Multiple connected sources confirm the app/framework context and the nature of the issue, but no concrete exploit details or official fix/version remediation are p...
CVE-2021-37262
JFinalcms 5.1.0 is vulnerable to regex injection that may lead to Denial of Service...
CVE-2021-37262: Improper Neutralization of Special Elements in Output Used by a Downstream Component
JFinalcms 5.1.0 is vulnerable to regex injection that may lead to Denial of Service...