Description
JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the navigation management department.
Remediation
References
https://github.com/Rabb1ter/cms/blob/main/There%20is%20a%20stored%20XSS%20in%20the%20navigation%20management%20office.md
Related Vulnerabilities
CVE-2011-4838 Vulnerability in maven package org.jruby:jruby
CVE-2020-17530 Vulnerability in maven package org.apache.struts:struts2-core
CVE-2021-46089 Vulnerability in maven package org.jeecgframework.boot:jeecg-boot-base-core
CVE-2022-41854 Vulnerability in maven package org.yaml:snakeyaml
CVE-2018-5673 Vulnerability in maven package org.dojotoolkit:dojo