Jfinal CMS v5.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /system/dict/list.

Published Apr 5, 2023 · Updated Feb 13, 2025 · Assigned by mitre