PT-2023-31238 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinalCMS version 5.0.0 Description: A cross-site scripting XSS issue was found in the column management department. Recommendations: For JFinalCMS version 5.0.0, update to a version that addresses the XSS issue in the column management...

PT-2023-31240 · Jfinalcms · Jfinalcms

Name of the Vulnerable Software and Affected Versions: JFinalCMS version 5.0.0 Description: A cross-site scripting XSS issue was found in the navigation management department of the software. This type of issue allows attackers to inject malicious scripts into content from otherwise trusted...

JFinalCMS 安全漏洞

JFinalCMS is a content management system. JFinalCMS suffers from a cross-site scripting vulnerability that stems from a lack of effective filtering and escaping of user-supplied data in the model management department, which can be exploited by an attacker to execute arbitrary Web script or HTML ...

CVE-2023-49487

CVE-2023-49487 concerns a cross-site scripting (XSS) vulnerability in JFinalCMS v5.0.0, located in the navigation management department. The root cause is insufficient filtering/escaping of user-supplied data, enabling arbitrary Web script or HTML execution. The CVSSv3.1 base score is 5.4 (Medium...

CVE-2023-49487

JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the navigation management department...

JFinalCMS 安全漏洞

JFinalCMS is a content management system. JFinalCMS v5.0.0 version exists cross-site scripting vulnerability, the vulnerability stems from the lack of effective filtering and escaping of user-supplied data in the section management department, an attacker can exploit this vulnerability by injecti...

CVE-2023-49486

JFinalCMS v5.0.0 is affected by a cross-site scripting (XSS) vulnerability in the model management department. The root cause is lack of effective filtering and escaping of user-supplied data. The vulnerability could allow attackers to execute arbitrary web scripts or HTML by injecting a crafted ...

CVE-2023-49485

JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the column management department...

CVE-2023-49486

JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the model management department...

CVE-2023-49486: Improper Neutralization of Input During Web Page Generation

JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the model management department...

CVE-2023-49487: Improper Neutralization of Input During Web Page Generation

JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the navigation management department...

CVE-2023-49485: Improper Neutralization of Input During Web Page Generation

JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the column management department...

CVE-2023-49485

JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the column management department...

CVE-2023-49487

JFinalCMS v5.0.0 was discovered to contain a cross-site scripting XSS vulnerability in the navigation management department...

JFinalCMS /admin/nav/update Component Cross-Site Request Forgery Vulnerability

JFinalCMS is a content management system. A cross-site request forgery vulnerability exists in JFinalCMS version v5.0.0, which originates from the /admin/nav/update component that does not adequately validate whether a request is coming from a trusted user. An attacker can exploit this...

GHSA-8HCH-Q86G-J38W Cross-Site Request Forgery in JFinalCMS via /admin/category/update

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/category/update...

Cross-Site Request Forgery in JFinalCMS via /admin/category/delete

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/category/delete...

GHSA-882G-GJQP-9VJP Cross-Site Request Forgery in JFinalCMS via /admin/category/save

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/category/save...

GHSA-MWVQ-GC5W-M78F Cross-Site Request Forgery in JFinalCMS via /admin/category/delete

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/category/delete...

Cross-Site Request Forgery in JFinalCMS via /admin/nav/update

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery CSRF vulnerability via /admin/nav/update...