CVE-2022-4282

CVE-2022-4282 affects SpringBootCMS, specifically the Template Management component. The issue is described as a remote injection vulnerability arising from manipulation of an unknown functionality, with exploitation possible over the network and high impact on confidentiality, integrity, and ava...

CVE-2023-43191

CVE-2023-43191 affects SpringbootCMS 1.0 and related JFinalCMS entries, with a stored XSS condition: malicious code embedded in a foreground message saved to the database can execute when users view comments. The Red Hat advisory and multiple CVE records describe the attack as HTML-embedded scrip...

CVE-2024-6539

CVE-2024-6539 – heyewei SpringBootCMS vulnerability affecting the Guestbook Handler component, specifically an unknown function of the file /guestbook. The manipulation of the Content parameter leads to cross-site scripting and can be exploited remotely. Public disclosure of exploits is indicated...

CVE-2023-43192

The CVE-2023-43192 entry concerns SpringbootCMS 1.0, where a SQL injection vulnerability exists in a newly created background component. User-supplied parameters are not filtered, allowing special characters to alter SQL logic and potentially enable attackers to execute arbitrary SQL statements. ...