531 matches found
Cross site scripting
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via Label management editing...
Cross site scripting
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS in the site management office...
Cross site scripting
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS...
CVE-2023-50101
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via Label management editing...
CVE-2023-50100
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via carousel image editing...
PT-2023-31472 · Jfinalcms · Jfinalcms
Name of the Vulnerable Software and Affected Versions: JFinalcms version 5.0.0 Description: The issue is related to Cross Site Scripting XSS via carousel image editing. This means that an attacker could potentially inject malicious scripts into the website, which would then be executed by the...
PT-2023-31474 · Jfinalcms · Jfinalcms
Name of the Vulnerable Software and Affected Versions: JFinalcms version 5.0.0 Description: The issue is related to Cross Site Scripting XSS, which is a type of security vulnerability that can allow an attacker to inject malicious scripts into a website. No information is provided about the...
PT-2023-31481 · Jfinalcms · Jfinalcms
Name of the Vulnerable Software and Affected Versions: JFinalcms version 5.0.0 Description: The issue is related to Cross Site Scripting XSS in the site management office. This means an attacker could potentially inject malicious scripts into the website, affecting users who visit the site...
CVE-2023-50101
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via Label management editing...
JFinalCMS Cross-Site Scripting Vulnerability
JFinalCMS is a content management system by heyewei Personal Developer. A cross-site scripting vulnerability exists in JFinalCMS version 5.0.0, which stems from a cross-site scripting XSS vulnerability in the Label management editing...
CVE-2023-50100
CVE-2023-50100 affects JFinalcms 5.0.0. The vulnerability is a Cross-Site Scripting (XSS) flaw exposed via the carousel image editing feature, caused by insufficient filtering/escaping of user-supplied data. Impact: an attacker can inject and execute arbitrary scripts in the victim’s browser. Exp...
JFinal 跨站脚本漏洞
JFinalCMS is a content management system. JFinalCMS version 5.0.0 cross-site scripting vulnerability, the vulnerability stems from the carousel image editing of user-supplied data lack of effective filtering and escaping, the vulnerability can be exploited by an attacker by injecting a...
CVE-2023-50102
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS...
CVE-2023-50101
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via Label management editing...
CVE-2023-50102
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS...
JFinalCMS Cross-Site Scripting Vulnerability
JFinalCMS is a content management system by heyewei Personal Developer. A cross-site scripting vulnerability exists in JFinalCMS version 5.0.0, which stems from a cross-site scripting XSS vulnerability in the site management office...
CVE-2023-50137
CVE-2023-50137 : JFinalcms 5.0.0 is vulnerable to Cross-Site Scripting (XSS) in the site management office. The issue is documented across multiple feeds (NVD, Red Hat, Veracode, OSV, GHSA) with a base CVSS v3.1 score of 5.4 (Medium). The root cause is an XSS flaw in the site management office wh...
JFinalCMS Cross-Site Scripting Vulnerability
JFinalCMS is a content management system by heyewei individual developer. A cross-site scripting vulnerability exists in JFinalCMS version 5.0.0, which stems from a cross-site scripting XSS vulnerability in Content data...
CVE-2023-50102
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) due to insufficient input sanitization, enabling injection of malicious JavaScript into a user’s browser. Affected component is the web content handling in JFinalcms; the root cause is input sanitization gaps. The reports do not provide ...