CVE-2024-22494

A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save mobile parameter, which allows remote attackers to inject arbitrary web script or HTML...

CVE-2024-22494: Improper Neutralization of Input During Web Page Generation

A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save mobile parameter, which allows remote attackers to inject arbitrary web script or HTML...

PT-2024-19449

Name of the Vulnerable Software and Affected Versions JFinalcms version 5.0.0 Description A stored XSS issue exists via the "/gusetbook/save" API endpoint, specifically through the contact parameter, allowing remote attackers to inject arbitrary web script or HTML. Recommendations For JFinalcms...

CVE-2024-22492: Improper Neutralization of Input During Web Page Generation

A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save contact parameter, which allows remote attackers to inject arbitrary web script or HTML...

CVE-2024-22493

A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save content parameter, which allows remote attackers to inject arbitrary web script or HTML...

CVE-2024-22492

A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save contact parameter, which allows remote attackers to inject arbitrary web script or HTML...

PT-2024-19450 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinalcms version 5.0.0 Description: A stored XSS issue exists via the "/gusetbook/save" API endpoint, specifically through the content parameter, allowing remote attackers to inject arbitrary web script or HTML. Recommendations: For JFinalcm...