Lucene search
+L

532 matches found

Positive Technologies
Positive Technologies
•added 2024/01/09 12:00 a.m.•12 views

PT-2024-13869 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinalcms version 5.0.0 Description: A Cross Site Scripting XSS issue allows attackers to run arbitrary code via the name field when creating a new custom table. This enables attackers to execute malicious scripts, potentially leading to...

5.4CVSS5.5AI score0.00408EPSS
SaveExploits1References6
OSV
OSV
•added 2024/01/09 12:00 a.m.•17 views

CVE-2023-50136

Cross Site Scripting XSS vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary code via the name field when creating a new custom table...

5.4CVSS6.1AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/01/09 12:00 a.m.•8 views

CVE-2023-50136

Cross Site Scripting XSS vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary code via the name field when creating a new custom table...

5.3AI score0.00408EPSS
SaveExploits1References1
Veracode
Veracode
•added 2023/12/19 2:31 a.m.•28 views

Cross-Site Scripting (XSS)

JFinalcms is vulnerable to Cross-Site Scripting XSS. The vulnerability exists via carousel image editing which allows an attacker to inject and execute arbitrary scripts...

5.4CVSS6.6AI score0.00444EPSS
SaveExploits1References2Affected Software1
CNVD
CNVD
•added 2023/12/18 12:00 a.m.•23 views

JFinalCMS Cross-Site Scripting Vulnerability (CNVD-2024-0021733)

JFinalCMS is a content management system. JFinalCMS version 5.0.0 cross-site scripting vulnerability, the vulnerability stems from the carousel image editing of user-supplied data lack of effective filtering and escaping, the vulnerability can be exploited by an attacker by injecting a...

5.4CVSS6.5AI score0.00444EPSS
SaveExploits1References1
Github Security Blog
Github Security Blog
•added 2023/12/14 6:30 p.m.•33 views

Cross-site Scripting in JFinalcms

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via Label management editing...

5.4CVSS6AI score0.00439EPSS
SaveExploits1References3Affected Software1
Github Security Blog
Github Security Blog
•added 2023/12/14 6:30 p.m.•27 views

Cross-site Scripting in JFinalcms

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS in the site management office...

5.4CVSS5.9AI score0.00456EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2023/12/14 6:30 p.m.•40 views

GHSA-3HF6-F8CH-5869 Cross-site Scripting in JFinalcms

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via carousel image editing...

5.4CVSS5.9AI score0.00444EPSS
SaveExploits1References2
OSV
OSV
•added 2023/12/14 6:30 p.m.•50 views

GHSA-M3P6-43XJ-PF9V Cross-site Scripting in JFinalcms

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via Label management editing...

5.4CVSS5.9AI score0.00439EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2023/12/14 6:30 p.m.•32 views

Cross-site Scripting in JFinalcms

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via carousel image editing...

5.4CVSS6AI score0.00444EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2023/12/14 6:30 p.m.•24 views

GHSA-P3PH-6245-4WFC Cross-site Scripting in JFinalcms

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS...

5.4CVSS5.9AI score0.00428EPSS
SaveExploits1References3
OSV
OSV
•added 2023/12/14 6:30 p.m.•13 views

GHSA-XV7P-JW46-8R85 Cross-site Scripting in JFinalcms

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS in the site management office...

5.4CVSS6AI score0.00456EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2023/12/14 6:30 p.m.•34 views

Cross-site Scripting in JFinalcms

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS...

5.4CVSS6.4AI score0.00428EPSS
SaveExploits1References3Affected Software1
attackerkb
attackerkb
•added 2023/12/14 4:15 p.m.•5 views

CVE-2023-50101

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via Label management editing...

5.4CVSS6AI score0.00439EPSS
SaveExploits1References2
NVD
NVD
•added 2023/12/14 4:15 p.m.•15 views

CVE-2023-50137

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS in the site management office...

5.4CVSS0.00456EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/12/14 4:15 p.m.•6 views

CVE-2023-50102

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS...

5.4CVSS6AI score0.00428EPSS
SaveExploits1References2
NVD
NVD
•added 2023/12/14 4:15 p.m.•29 views

CVE-2023-50101

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via Label management editing...

5.4CVSS0.00439EPSS
SaveExploits1References1
NVD
NVD
•added 2023/12/14 4:15 p.m.•35 views

CVE-2023-50102

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS...

5.4CVSS0.00428EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/12/14 4:15 p.m.•5 views

CVE-2023-50137

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS in the site management office...

5.4CVSS5.9AI score0.00456EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2023/12/14 4:15 p.m.•17 views

CVE-2023-50100

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via carousel image editing...

5.4CVSS6AI score0.00444EPSS
SaveExploits1References2
Rows per page
Query Builder