6 matches found
GHSA-M3P6-43XJ-PF9V Cross-site Scripting in JFinalcms
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via Label management editing...
CVE-2023-50101
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via Label management editing...
Cross site scripting
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via Label management editing...
CVE-2023-50101
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via Label management editing...
CVE-2023-50101
JFinalcms 5.0.0 is affected by a Cross-Site Scripting (XSS) vulnerability in the Label management editing feature. The issue is described across multiple sources (including Red Hat and Veracode feeds) as stemming from insufficient input validation in the library’s label management flow, enabling ...
