Description
JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the model management department.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | com.jfinal:jfinal | <= 5.0.0 | — | GHSA-hjfp-2j7q-xmx4 |
Medium · 5.4
CVE-2023-49486
EUVD-2023-3225GHSA-hjfp-2j7q-xmx4
Cross-site Scripting in JFinalCMS
Published Dec 8, 2023 · Updated Aug 2, 2024 · Assigned by mitre