Description
Cross Site Scripting (XSS) in Jfinal CMS v4.7.1 and earlier allows remote attackers to execute arbitrary code via the 'Nickname' parameter in the component '/jfinal_cms/front/person/profile.html'.
Unscored
CVE-2020-19148
EUVD-2020-11055GHSA-5xr9-4m9g-r278
Cross Site Scripting (XSS) in Jfinal CMS v4.7.1 and earlier allows remote attackers to execute arbitrary code via the 'Nickname' parameter …
Published Sep 15, 2021 · Updated Aug 4, 2024 · Assigned by mitre