Description
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) via Label management editing.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | com.jfinal:jfinal | <= 5.0.0 | — | GHSA-m3p6-43xj-pf9v |
Medium · 5.4
CVE-2023-50101
EUVD-2023-3240GHSA-m3p6-43xj-pf9v
Cross-site Scripting in JFinalcms
Published Dec 14, 2023 · Updated Nov 26, 2024 · Assigned by mitre