CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Rapid7 Vulnerability Database (full)•added 2023/02/03 12:00 a.m.•1 views

CVE-2023-22975: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in JFinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter under /front/person/profile.html...

6.1CVSS6.1AI score0.00423EPSS

SaveExploits1References2

NVD•added 2021/09/15 2:15 p.m.•18 views

CVE-2020-19148

Cross Site Scripting XSS in Jfinal CMS v4.7.1 and earlier allows remote attackers to execute arbitrary code via the 'Nickname' parameter in the component '/jfinalcms/front/person/profile.html'...

5.4CVSS0.01083EPSS

SaveExploits1References1

Cvelist•added 2021/09/15 1:52 p.m.•32 views

CVE-2020-19148

Cross Site Scripting XSS in Jfinal CMS v4.7.1 and earlier allows remote attackers to execute arbitrary code via the 'Nickname' parameter in the component '/jfinalcms/front/person/profile.html'...

5.7AI score0.01083EPSS

SaveExploits1References1

Rapid7 Vulnerability Database (full)•added 2021/09/15 12:00 a.m.•2 views

CVE-2020-19148: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS in Jfinal CMS v4.7.1 and earlier allows remote attackers to execute arbitrary code via the 'Nickname' parameter in the component '/jfinalcms/front/person/profile.html'...

5.4CVSS6.4AI score0.01083EPSS

SaveExploits1References2

Rows per page

Query Builder

Family

Bulletin Type

Min CVSS Score

Date

Order by