CVE-2021-33348

CVE-2021-33348 affects JFinal framework v4.9.10 and earlier. The issue is that the Controller.set method is not strictly filtered, which can lead to cross-site scripting (XSS) vulnerabilities in some scenarios. This is supported by multiple sources in the connected documents (NVD entry, Red Hat a...