Vulmon
Recent Vulnerabilities
Product List
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
jfinalcms project jfinalcms 5.0.0 vulnerabilities and exploits
(subscribe to this query)
NA
CVE-2023-50100
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) via carousel image editing.
Jfinalcms Project Jfinalcms 5.0.0
NA
CVE-2023-50101
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) via Label management editing.
Jfinalcms Project Jfinalcms 5.0.0
NA
CVE-2023-50102
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS).
Jfinalcms Project Jfinalcms 5.0.0
NA
CVE-2023-50136
Cross Site Scripting (XSS) vulnerability in JFinalcms 5.0.0 allows malicious users to run arbitrary code via the name field when creating a new custom table.
Jfinalcms Project Jfinalcms 5.0.0
NA
CVE-2023-50137
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) in the site management office.
Jfinalcms Project Jfinalcms 5.0.0
NA
CVE-2023-49448
JFinalCMS v5.0.0 exists to contain a Cross-Site Request Forgery (CSRF) vulnerability via admin/nav/delete.
Jfinalcms Project Jfinalcms 5.0.0
NA
CVE-2024-24029
JFinalCMS 5.0.0 is vulnerable to SQL injection via /admin/content/data.
Jfinalcms Project Jfinalcms 5.0.0
NA
CVE-2024-22492
A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save contact parameter, which allows remote malicious users to inject arbitrary web script or HTML.
Jfinalcms Project Jfinalcms 5.0.0
NA
CVE-2024-22493
A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save content parameter, which allows remote malicious users to inject arbitrary web script or HTML.
Jfinalcms Project Jfinalcms 5.0.0
NA
CVE-2024-22494
A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save mobile parameter, which allows remote malicious users to inject arbitrary web script or HTML.
Jfinalcms Project Jfinalcms 5.0.0
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-38627
CVE-2022-45803
CVE-2024-38319
camera
template injection
CVE-2024-27801
CVE-2024-0762
CVE-2024-5791
unauthorized
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
4
NEXT »