GHSA-V435-PFJ6-68R3 Cross-site Scripting in JFinal

Cross Site Scripting XSS vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary code via the /admin/login username parameter...

CVE-2024-22496

Cross Site Scripting XSS vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary code via the /admin/login username parameter...

Cross site scripting

Cross Site Scripting XSS vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary code via the /admin/login username parameter...

PT-2024-19452 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinalcms version 5.0.0 Description: A Cross Site Scripting XSS issue allows attackers to execute arbitrary code by exploiting the username parameter in the "/admin/login" API endpoint. Recommendations: For JFinalcms version 5.0.0, avoid usin...

CVE-2024-22497

Cross Site Scripting XSS vulnerability in /admin/login password parameter in JFinalcms 5.0.0 allows attackers to run arbitrary code via crafted URL...

CVE-2024-22496

Cross Site Scripting XSS vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary code via the /admin/login username parameter...

CVE-2024-22496

Cross Site Scripting XSS vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary code via the /admin/login username parameter...

CVE-2024-22497

Cross Site Scripting XSS vulnerability in /admin/login password parameter in JFinalcms 5.0.0 allows attackers to run arbitrary code via crafted URL...

CVE-2024-22497: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in /admin/login password parameter in JFinalcms 5.0.0 allows attackers to run arbitrary code via crafted URL...

CVE-2024-22496: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary code via the /admin/login username parameter...

CVE-2024-22497

Cross Site Scripting XSS vulnerability in /admin/login password parameter in JFinalcms 5.0.0 allows attackers to run arbitrary code via crafted URL...

PT-2024-19453

Name of the Vulnerable Software and Affected Versions JFinalcms version 5.0.0 Description A Cross Site Scripting XSS issue exists, allowing attackers to execute arbitrary code through a crafted URL. The vulnerability is specifically related to the password parameter in the "/admin/login" API...

CVE-2024-22496

Cross Site Scripting XSS vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary code via the /admin/login username parameter...

CVE-2024-22496

CVE-2024-22496 is an XSS vulnerability affecting JFinalcms 5.0.0. The issue stems from improper handling of the /admin/login username parameter, enabling injection of arbitrary JavaScript code. Connected sources corroborate the vulnerability as Cross-site Scripting in JFinalcms with the same vect...

CVE-2024-22497

CVE-2024-22497 : A cross-site scripting (XSS) vulnerability affects JFinalcms 5.0.0, arising from handling of the password parameter in the /admin/login route. Exploitation via crafted URLs may allow an attacker to run arbitrary code. Multiple feeds (NVD, Red Hat, Veracode, OSV, GHSA, CNNVD, CVE ...

CVE-2024-22497

Cross Site Scripting XSS vulnerability in /admin/login password parameter in JFinalcms 5.0.0 allows attackers to run arbitrary code via crafted URL...

CVE-2024-22496

Cross Site Scripting XSS vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary code via the /admin/login username parameter...

GHSA-859H-4W58-78XW Cross-site Scripting in JFinal

A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save contact parameter, which allows remote attackers to inject arbitrary web script or HTML...

Cross-site Scripting in JFinal

A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save content parameter, which allows remote attackers to inject arbitrary web script or HTML...

Cross-site Scripting in JFinal

A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save contact parameter, which allows remote attackers to inject arbitrary web script or HTML...