Description
Jfinal_CMS 5.1.0 allows attackers to use the feedback function to send malicious XSS code to the administrator backend and execute it.
Unscored
CVE-2022-27111
EUVD-2022-31650GHSA-629w-w3qc-mr46
Jfinal_CMS 5.1.0 allows attackers to use the feedback function to send malicious XSS code to the administrator backend and execute it.
Published Apr 11, 2022 · Updated Aug 3, 2024 · Assigned by mitre