5 matches found
CVE-2022-27111
JfinalCMS 5.1.0 allows attackers to use the feedback function to send malicious XSS code to the administrator backend and execute it...
5.4CVSS6.4AI score0.00479EPSS
SaveExploits1References1
NoneCMS 跨站脚本漏洞
NoneCMS is a content management system CMS based on Thinkphp. A security vulnerability exists in NoneCMS version 1.3.0, which stems from the presence of a cross-site scripting XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML via the feedback function...
6.1CVSS6.2AI score0.00521EPSS
SaveExploits1References2
Design/Logic Flaw
JfinalCMS 5.1.0 allows attackers to use the feedback function to send malicious XSS code to the administrator backend and execute it...
3.5CVSS5.5AI score0.00479EPSS
SaveExploits1References1Affected Software1
20