CVE-2024-57772

creationtimestamp| type| source ---|---|--- 2025-01-16 17:49:55+00:00| seen| https://infosec.exchange/users/cve/statuses/113839295370791652 2025-01-16 17:55:39+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1985 2025-01-16 18:16:00+00:00| seen|...

CVE-2024-57772

A cross-site scripting (XSS) vulnerability exists in JFinalOA versions prior to v2025.01.01 . The flaw is located in the /bumph/getDraftListPage?type interface, where a crafted payload can allow attackers to execute arbitrary web scripts or HTML. To remediate this, users should update to version ...