Description
JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/user/list.
Remediation
References
https://github.com/jflyfox/jfinal_cms/issues/48
Related Vulnerabilities
CVE-2021-23335 Vulnerability in npm package is-user-valid
CVE-2016-10531 Vulnerability in npm package marked
CVE-2020-7597 Vulnerability in npm package codecov
CVE-2020-6858 Vulnerability in maven package com.hotels.styx:styx-components
CVE-2018-8811 Vulnerability in maven package org.opencms:opencms-core