CVE-2023-47327

The "Create a Space" feature in Silverpeas Core 6.3.1 is reserved for use by administrators. This function suffers from broken access control, allowing any authenticated user to create a space by navigating to the correct URL...

Improper access control

The "Create a Space" feature in Silverpeas Core 6.3.1 is reserved for use by administrators. This function suffers from broken access control, allowing any authenticated user to create a space by navigating to the correct URL...

JFinalCMS Cross-Site Scripting Vulnerability (CNVD-2023-9769208)

JFinalCMS is a content management system. JFinalCMS v5.0.0 version exists cross-site scripting vulnerability, the vulnerability stems from the lack of effective filtering and escaping of user-supplied data in the navigation management department, an attacker exploits the vulnerability by injectin...

CVE-2023-6542

Due to lack of proper authorization checks in Emarsys SDK for Android, an attacker can call a particular activity and can forward himself web pages and/or deep links without any validation directly from the host application. On successful attack, an attacker could navigate to arbitrary URL...

Cross-site Scripting in JFinalCMS

JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the navigation management department...

GHSA-M42V-QV3C-H6J7 Cross-site Scripting in JFinalCMS

JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the navigation management department...

CVE-2023-49487

JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the navigation management department...

CVE-2023-49487

JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the navigation management department...

Cross site scripting

JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the navigation management department...

PT-2023-31240 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinalCMS version 5.0.0 Description: A cross-site scripting XSS issue was found in the navigation management department of the software. This type of issue allows attackers to inject malicious scripts into content from otherwise trusted...

CVE-2023-49487

CVE-2023-49487 concerns a cross-site scripting (XSS) vulnerability in JFinalCMS v5.0.0, located in the navigation management department. The root cause is insufficient filtering/escaping of user-supplied data, enabling arbitrary Web script or HTML execution. The CVSSv3.1 base score is 5.4 (Medium...

CVE-2023-49487

JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the navigation management department...

JFinalCMS 安全漏洞

JFinalCMS is a content management system. JFinalCMS v5.0.0 version exists cross-site scripting vulnerability, the vulnerability stems from the lack of effective filtering and escaping of user-supplied data in the navigation management department, an attacker exploits the vulnerability by injectin...

CVE-2023-49487

JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the navigation management department...

Brave Android 1.61.100 Security Fixes

Fixed crash when incorrectly handling reward navigation redirects as reported on HackerOne by 0xc4gr1. Upgraded Chromium to 120.0.6099.62 — refer to Google Chrome advisories for inherited CVEs...

GHSA-PV3G-VC3Q-8C9G Cross-Site Request Forgery in JFinalCMS via admin/nav/delete

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via admin/nav/delete...

GHSA-32J2-C7MX-V4JJ Cross-Site Request Forgery in JFinalCMS via /admin/nav/update

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/nav/update...

CVE-2023-49446

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/nav/save...

CVE-2023-49448

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via admin/nav/delete...

JFinalCMS 安全漏洞

JFinalCMS is a content management system. A cross-site request forgery vulnerability exists in JFinalCMS version v5.0.0, which originates from the /admin/nav/update component that does not adequately validate whether a request is coming from a trusted user. An attacker can exploit this...