Description
Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the post title text field under the publish blog module.
Remediation
References
https://github.com/jflyfox/jfinal_cms/issues/45
Related Vulnerabilities
CVE-2022-31129 Vulnerability in npm package moment
CVE-2019-10788 Vulnerability in npm package im-metadata
CVE-2020-28462 Vulnerability in npm package ion-parser
CVE-2023-29524 Vulnerability in maven package org.xwiki.platform:xwiki-platform-scheduler-ui
CVE-2022-31160 Vulnerability in maven package org.webjars.bowergithub.jquery:jquery-ui