Lucene search
+L

582 matches found

CNNVD
CNNVD
•added 2024/01/09 12:00 a.m.•15 views

JFinalCMS 安全漏洞

JFinalCMS is a content management system. A cross-site scripting vulnerability exists in JFinalcms version 5.0.0, which stems from the application's lack of effective filtering and escaping of user-supplied data, and can be exploited by an attacker to run arbitrary code when creating a new custom...

5.4CVSS6.5AI score0.00408EPSS
SaveExploits1References2
OSV
OSV
•added 2024/01/09 12:00 a.m.•18 views

CVE-2023-50136

Cross Site Scripting XSS vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary code via the name field when creating a new custom table...

5.4CVSS6.1AI score
SaveExploits0References3
Vulnrichment
Vulnrichment
•added 2024/01/09 12:00 a.m.•9 views

CVE-2023-50136

Cross Site Scripting XSS vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary code via the name field when creating a new custom table...

5.3AI score0.00408EPSS
SaveExploits1References1
Veracode
Veracode
•added 2023/12/19 2:31 a.m.•31 views

Cross-Site Scripting (XSS)

JFinalcms is vulnerable to Cross-Site Scripting XSS. The vulnerability exists via carousel image editing which allows an attacker to inject and execute arbitrary scripts...

5.4CVSS6.6AI score0.00444EPSS
SaveExploits1References2Affected Software1
CNVD
CNVD
•added 2023/12/18 12:00 a.m.•24 views

JFinalCMS Cross-Site Scripting Vulnerability (CNVD-2024-0021733)

JFinalCMS is a content management system. JFinalCMS version 5.0.0 cross-site scripting vulnerability, the vulnerability stems from the carousel image editing of user-supplied data lack of effective filtering and escaping, the vulnerability can be exploited by an attacker by injecting a...

5.4CVSS6.5AI score0.00444EPSS
SaveExploits1References1
OSV
OSV
•added 2023/12/14 6:30 p.m.•40 views

GHSA-3HF6-F8CH-5869 Cross-site Scripting in JFinalcms

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via carousel image editing...

5.4CVSS5.9AI score0.00444EPSS
SaveExploits1References2
Github Security Blog
Github Security Blog
•added 2023/12/14 6:30 p.m.•27 views

Cross-site Scripting in JFinalcms

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS in the site management office...

5.4CVSS5.9AI score0.00456EPSS
SaveExploits1References3Affected Software1
Github Security Blog
Github Security Blog
•added 2023/12/14 6:30 p.m.•33 views

Cross-site Scripting in JFinalcms

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via Label management editing...

5.4CVSS6AI score0.00439EPSS
SaveExploits1References3Affected Software1
Github Security Blog
Github Security Blog
•added 2023/12/14 6:30 p.m.•37 views

Cross-site Scripting in JFinalcms

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via carousel image editing...

5.4CVSS6AI score0.00444EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2023/12/14 6:30 p.m.•14 views

GHSA-XV7P-JW46-8R85 Cross-site Scripting in JFinalcms

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS in the site management office...

5.4CVSS6AI score0.00456EPSS
SaveExploits1References3
OSV
OSV
•added 2023/12/14 6:30 p.m.•26 views

GHSA-P3PH-6245-4WFC Cross-site Scripting in JFinalcms

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS...

5.4CVSS5.9AI score0.00428EPSS
SaveExploits1References3
OSV
OSV
•added 2023/12/14 6:30 p.m.•50 views

GHSA-M3P6-43XJ-PF9V Cross-site Scripting in JFinalcms

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via Label management editing...

5.4CVSS5.9AI score0.00439EPSS
SaveExploits1References3
Github Security Blog
Github Security Blog
•added 2023/12/14 6:30 p.m.•38 views

Cross-site Scripting in JFinalcms

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS...

5.4CVSS6.4AI score0.00428EPSS
SaveExploits1References3Affected Software1
NVD
NVD
•added 2023/12/14 4:15 p.m.•16 views

CVE-2023-50137

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS in the site management office...

5.4CVSS0.00456EPSS
SaveExploits1References1
attackerkb
attackerkb
•added 2023/12/14 4:15 p.m.•9 views

CVE-2023-50101

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via Label management editing...

5.4CVSS6AI score0.00439EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2023/12/14 4:15 p.m.•6 views

CVE-2023-50102

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS...

5.4CVSS6AI score0.00428EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2023/12/14 4:15 p.m.•20 views

CVE-2023-50100

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via carousel image editing...

5.4CVSS6AI score0.00444EPSS
SaveExploits1References2
attackerkb
attackerkb
•added 2023/12/14 4:15 p.m.•5 views

CVE-2023-50137

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS in the site management office...

5.4CVSS5.9AI score0.00456EPSS
SaveExploits1References2
NVD
NVD
•added 2023/12/14 4:15 p.m.•31 views

CVE-2023-50101

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via Label management editing...

5.4CVSS0.00439EPSS
SaveExploits1References1
NVD
NVD
•added 2023/12/14 4:15 p.m.•36 views

CVE-2023-50102

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS...

5.4CVSS0.00428EPSS
SaveExploits1References1
Rows per page
Query Builder