CVE-2023-51254

Cross Site Scripting vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to execute arbitrary code via a crafted script to the friendship link component...

CVE-2023-51254

Jfinalcms v.5.0.0 is vulnerable to a Cross-Site Scripting (XSS) vulnerability due to improper input validation within the friendship link component . A remote attacker can exploit this by delivering a crafted script to execute arbitrary code, potentially leading to unauthorized actions on the aff...

CVE-2023-51254

Cross Site Scripting vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to execute arbitrary code via a crafted script to the friendship link component...