EUVD-2021-27685

Malicious code in bioql PyPI...

CVE-2021-40509

ViewCommon.java in JForum2 2.7.0 allows XSS via a user signature...

Design/Logic Flaw

ViewCommon.java in JForum2 2.7.0 allows XSS via a user signature...

CVE-2021-40509

ViewCommon.java in JForum2 2.7.0 allows XSS via a user signature...

CVE-2021-40509

CVE-2021-40509 affects JForum2 2.7.0. A cross-site scripting (XSS) vulnerability exists in ViewCommon.java where user input (signature) is not properly handled, allowing injection of malicious scripts. Documents confirm the vulnerable component and file, the root cause is inadequate input sanitiz...

JForum 跨站脚本漏洞

JForum is a web-based open source forum system developed by Jforum team using Java language. A cross-site scripting vulnerability exists in JForum, which stems from the failure of the product's ViewCommon.java file to properly handle user input data. An attacker can use this vulnerability to...