Jfinalcms Project: >> Jfinalcms Security Vulnerabilities
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) via carousel image editing.
CVSS Score
5.4
EPSS Score
0.001
Published
2023-12-14
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) via Label management editing.
CVSS Score
5.4
EPSS Score
0.002
Published
2023-12-14
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS).
CVSS Score
5.4
EPSS Score
0.002
Published
2023-12-14
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) in the site management office.
CVSS Score
5.4
EPSS Score
0.001
Published
2023-12-14
JFinalCMS 5.0.0 could allow a remote attacker to read files via ../ Directory Traversal in the /common/down/file fileKey parameter.
CVSS Score
7.5
EPSS Score
0.001
Published
2023-12-10
JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the column management department.
CVSS Score
5.4
EPSS Score
0.001
Published
2023-12-08
JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the model management department.
CVSS Score
5.4
EPSS Score
0.001
Published
2023-12-08
JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the navigation management department.
CVSS Score
5.4
EPSS Score
0.001
Published
2023-12-08
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/tag/update.
CVSS Score
8.8
EPSS Score
0.003
Published
2023-12-05
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/form/save.
CVSS Score
8.8
EPSS Score
0.003
Published
2023-12-05