Jfinalcms Security Vulnerabilities and Issues — Jfinalcms CVE List

Lucene search

Jfinalcms ProjectJfinalcms

4 matches found

CVE•added 2024/01/23 7:15 p.m.•209 views

CVE-2024-22497

Cross Site Scripting (XSS) vulnerability in /admin/login password parameter in JFinalcms 5.0.0 allows attackers to run arbitrary code via crafted URL.

6.1CVSS6.1AI score0.00107EPSS

Web

CVE•added 2024/01/23 5:15 p.m.•197 views

CVE-2024-22496

Cross Site Scripting (XSS) vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary code via the /admin/login username parameter.

6.1CVSS6AI score0.00107EPSS

Web

CVE•added 2024/04/29 6:15 p.m.•65 views

CVE-2023-51254

Cross Site Scripting vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to execute arbitrary code via a crafted script to the friendship link component.

6.1CVSS7.1AI score0.00341EPSS

CVE•added 2024/09/12 12:15 a.m.•43 views

CVE-2024-8706

A vulnerability was found in JFinalCMS up to 20240903. It has been classified as problematic. This affects the function update of the file /admin/template/update of the component com.cms.util.TemplateUtils. The manipulation of the argument fileName leads to path traversal. It is possible to initiat...

6.5CVSS4.7AI score0.00407EPSS

Web