Description
JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the column management department.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | com.jfinal:jfinal | <= 5.0.0 | — | GHSA-f2w8-4m48-5qrq |
Medium · 5.4
CVE-2023-49485
EUVD-2023-3192GHSA-f2w8-4m48-5qrq
Cross-site Scripting in JFinalCMS
Published Dec 8, 2023 · Updated May 27, 2025 · Assigned by mitre