Description
Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the post title text field under the publish blog module.
Remediation
References
https://github.com/jflyfox/jfinal_cms/issues/45
Related Vulnerabilities
CVE-2022-29167 Vulnerability in maven package org.webjars.npm:hawk
CVE-2017-16165 Vulnerability in npm package calmquist.static-server
CVE-2021-21631 Vulnerability in maven package org.jenkins-ci.plugins:cloud-stats
CVE-2021-31684 Vulnerability in maven package net.minidev:json-smart
CVE-2019-17495 Vulnerability in maven package org.webjars.npm:swagger-ui