Description
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) via carousel image editing.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | com.jfinal:jfinal | <= 5.0.0 | — | GHSA-3hf6-f8ch-5869 |
Medium · 5.4
CVE-2023-50100
EUVD-2023-3081GHSA-3hf6-f8ch-5869
Cross-site Scripting in JFinalcms
Published Dec 14, 2023 · Updated Aug 2, 2024 · Assigned by mitre