CVE-2024-57776

creationtimestamp| type| source ---|---|--- 2025-01-16 17:55:33+00:00| seen| https://infosec.exchange/users/cve/statuses/113839317489246649 2025-01-16 17:55:33+00:00| published-proof-of-concept| https://t.me/DarkWebInformerCVEAlerts/1981 2025-01-16 18:16:10+00:00| seen|...

CVE-2024-57776

A cross-site scripting XSS vulnerability in the /apply/getEditPage?view interface of JFinalOA before v2025.01.01 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2024-57776

The CVE-2024-57776 affects JFinalOA: an XSS in the /apply/getEditPage?view interface on versions prior to 2025.01.01. Root cause is improper handling of crafted payloads leading to execution of arbitrary web scripts/HTML. Impact is cross-site script execution in the victim’s browser. remediation:...