Description
JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the navigation management department.
Remediation
References
https://github.com/Rabb1ter/cms/blob/main/There%20is%20a%20stored%20XSS%20in%20the%20navigation%20management%20office.md
Related Vulnerabilities
CVE-2021-30638 Vulnerability in maven package org.apache.tapestry:tapestry-core
CVE-2016-10573 Vulnerability in npm package baryton-saxophone
CVE-2021-28164 Vulnerability in maven package org.eclipse.jetty:jetty-webapp
CVE-2023-46502 Vulnerability in maven package org.opencrx:opencrx-core
CVE-2021-3461 Vulnerability in maven package org.keycloak:keycloak-services