CVE-2022-27111

JfinalCMS 5.1.0 allows attackers to use the feedback function to send malicious XSS code to the administrator backend and execute it...

NoneCMS 跨站脚本漏洞

NoneCMS is a content management system CMS based on Thinkphp. A security vulnerability exists in NoneCMS version 1.3.0, which stems from the presence of a cross-site scripting XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML via the feedback function...

Design/Logic Flaw

JfinalCMS 5.1.0 allows attackers to use the feedback function to send malicious XSS code to the administrator backend and execute it...

CVE-2022-27111

JfinalCMS 5.1.0 allows attackers to use the feedback function to send malicious XSS code to the administrator backend and execute it...

CVE-2022-27111

JfinalCMS 5.1.0 allows attackers to use the feedback function to send malicious XSS code to the administrator backend and execute it...

PT-2022-18229

Name of the Vulnerable Software and Affected Versions Jfinal CMS version 5.1.0 Description The issue allows attackers to use the feedback function to send malicious XSS code to the administrator backend and execute it. This can potentially lead to unauthorized access or control of the administrat...

CVE-2022-27111: Improper Neutralization of Input During Web Page Generation

JfinalCMS 5.1.0 allows attackers to use the feedback function to send malicious XSS code to the administrator backend and execute it...