Skip to content
OpenAdvisories

Vendor

heyewei

3 known vulnerabilities.

Products

JFinalCMS 2 SpringBootCMS 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.4
    CVE-2026-2200

    heyewei JFinalCMS API Endpoint save cross site scripting

    A weakness has been identified in heyewei JFinalCMS 5.0.0. This affects an unknown function of the file /admin/admin/save of the component API Endpoint. Executing a manipulation can lead to cross site scripting. The attack can be launched remotely. The exploi…

    heyewei JFinalCMS
  • Low 3.5
    CVE-2024-6539

    heyewei SpringBootCMS Guestbook guestbook cross site scripting

    A vulnerability classified as problematic has been found in heyewei SpringBootCMS up to 2024-05-28. Affected is an unknown function of the file /guestbook of the component Guestbook Handler. The manipulation of the argument Content leads to cross site scripti…

    heyewei SpringBootCMS