Cross-site Scripting (XSS)

2022-06-2709:59:23

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

25.0%

JSON

com.jfinal:jfinal is vulnerable to cross-site scripting(XSS) attacks. A remote attacker is able to inject and execute arbitrary javascript via a crafted payload injected into the keyword text field under the publish blog module.

CPENameOperatorVersion
jfinalle5.0.1
jfinalle5.0.1

CPE	Name	Operator	Version
	jfinal	le	5.0.1
	jfinal	le	5.0.1

References

github.com/advisories/GHSA-9pvq-4cc7-24jg

github.com/jflyfox/jfinal_cms/issues/39

0.001 Low

EPSS

Percentile

25.0%

JSON

Related for VERACODE:36162