Skip to content
OpenAdvisories

Package · Maven

com.jflyfox:jflyfox_jfinal

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 5.4
    CVE-2022-36527

    Jfinal Cross-site Scripting vulnerability

    Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the post title text field under the publish blog module.

    com.jflyfox:jflyfox_jfinal Maven
  • Medium 5.4
    CVE-2022-29648

    Cross site scripting in Jfinal

    A cross-site scripting (XSS) vulnerability in Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted X-Forwarded-For request.

    com.jflyfox:jflyfox_jfinal Maven