CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

6 matches found

OSV•added 2023/12/14 6:30 p.m.•2 views

GHSA-M3P6-43XJ-PF9V Cross-site Scripting in JFinalcms

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via Label management editing...

5.4CVSS5.9AI score0.00439EPSS

Exploits1References3

NVD•added 2023/12/14 4:15 p.m.•22 views

CVE-2023-50101

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via Label management editing...

5.4CVSS0.00439EPSS

Exploits1References1

Prion•added 2023/12/14 4:15 p.m.•21 views

Cross site scripting

JFinalcms 5.0.0 is vulnerable to Cross Site Scripting XSS via Label management editing...

4.9CVSS6.2AI score0.00439EPSS

Exploits1References1Affected Software1

CVE•added 2023/12/14 12:0 a.m.•51 views

CVE-2023-50101

JFinalcms 5.0.0 is affected by a Cross-Site Scripting (XSS) vulnerability in the Label management editing feature. The issue is described across multiple sources (including Red Hat and Veracode feeds) as stemming from insufficient input validation in the library’s label management flow, enabling ...

5.4CVSS5.2AI score0.00439EPSS

Exploits1References1Affected Software1