Description
Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the post title text field under the publish blog module.
Remediation
References
https://github.com/jflyfox/jfinal_cms/issues/45
Related Vulnerabilities
CVE-2018-17421 Vulnerability in maven package com.zrlog:zrlog
CVE-2021-32808 Vulnerability in npm package ckeditor4
CVE-2022-21681 Vulnerability in npm package marked
CVE-2020-10544 Vulnerability in maven package org.primefaces:primefaces
CVE-2020-7774 Vulnerability in maven package org.webjars.npm:y18n