CVE-2023-49486

JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the model management department...

CVE-2023-49487

JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the navigation management department...

JFinalCMS /admin/nav/update Component Cross-Site Request Forgery Vulnerability

JFinalCMS is a content management system. A cross-site request forgery vulnerability exists in JFinalCMS version v5.0.0, which originates from the /admin/nav/update component that does not adequately validate whether a request is coming from a trusted user. An attacker can exploit this...

GHSA-882G-GJQP-9VJP Cross-Site Request Forgery in JFinalCMS via /admin/category/save

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/category/save...

GHSA-8HCH-Q86G-J38W Cross-Site Request Forgery in JFinalCMS via /admin/category/update

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/category/update...

GHSA-MWVQ-GC5W-M78F Cross-Site Request Forgery in JFinalCMS via /admin/category/delete

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/category/delete...

Cross-Site Request Forgery in JFinalCMS via /admin/nav/update

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/nav/update...

Cross-Site Request Forgery in JFinalCMS via /admin/nav/save

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/nav/save...

Cross-Site Request Forgery in JFinalCMS via /admin/category/save

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/category/save...

Cross-Site Request Forgery in JFinalCMS via /admin/category/delete

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/category/delete...

Cross-Site Request Forgery in JFinalCMS via /admin/div/update

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/div/update...

GHSA-6V55-H6M5-2352 Cross-Site Request Forgery in JFinalCMS via /admin/div/delete

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/div/delete...

GHSA-5F56-H6FG-RCRH Cross-Site Request Forgery in JFinalCMS via /admin/category/updateStatus

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/category/updateStatus...

Cross-Site Request Forgery in JFinalCMS via admin/nav/delete

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via admin/nav/delete...

GHSA-PV3G-VC3Q-8C9G Cross-Site Request Forgery in JFinalCMS via admin/nav/delete

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via admin/nav/delete...

GHSA-RQ2Q-HC6H-2PX2 Cross-Site Request Forgery in JFinalCMS via /admin/tag/save

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/tag/save...

GHSA-32J2-C7MX-V4JJ Cross-Site Request Forgery in JFinalCMS via /admin/nav/update

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/nav/update...

Cross-Site Request Forgery in JFinalCMS via /admin/category/updateStatus

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/category/updateStatus...

GHSA-HV4C-V8J8-54CW Cross-Site Request Forgery in JFinalCMS via /admin/nav/save

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/nav/save...

Cross-Site Request Forgery in JFinalCMS via /admin/category/update

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/category/update...