Skip to content
OpenAdvisories

Product · dromara

J2eeFAST

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 3.5
    CVE-2023-2476

    Dromara J2eeFAST Announcement cross site scripting

    A vulnerability was found in Dromara J2eeFAST up to 2.6.0. It has been classified as problematic. Affected is an unknown function of the component Announcement Handler. The manipulation of the argument 系统工具/公告管理 leads to cross site scripting. It is possible t…

    dromara J2eeFAST
  • Low 3.5
    CVE-2023-2475

    Dromara J2eeFAST System Message cross site scripting

    A vulnerability was found in Dromara J2eeFAST up to 2.6.0 and classified as problematic. This issue affects some unknown processing of the component System Message Handler. The manipulation of the argument 主题 leads to cross site scripting. The attack may be i…

    dromara J2eeFAST