CVE-2024-57771

The enterprise office system JFinalOA is vulnerable to a Cross-Site Scripting (XSS) flaw in versions prior to v2025.01.01 . The vulnerability exists in the common/getEditPage?view interface, where a specially crafted payload allows an attacker to execute arbitrary web scripts or HTML in the victi...