Description
JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the model management department.
Remediation
References
https://github.com/Rabb1ter/cms/blob/main/There%20is%20a%20stored%20XSS%20in%20the%20model%20management%20department.md
Related Vulnerabilities
CVE-2019-10754 Vulnerability in maven package org.apereo.cas:cas-server-core-services-api
CVE-2018-1282 Vulnerability in maven package org.apache.hive:hive-jdbc
CVE-2018-1000822 Vulnerability in maven package org.codelibs.fess:fess
CVE-2019-17570 Vulnerability in maven package org.apache.xmlrpc:xmlrpc