Description
JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the navigation management department.
Remediation
References
https://github.com/Rabb1ter/cms/blob/main/There%20is%20a%20stored%20XSS%20in%20the%20navigation%20management%20office.md
Related Vulnerabilities
CVE-2022-31147 Vulnerability in npm package jquery-validation
CVE-2021-37695 Vulnerability in maven package org.webjars.bowergithub.ckeditor:ckeditor4
CVE-2014-7810 Vulnerability in maven package org.apache.tomcat:tomcat-jasper
CVE-2021-39132 Vulnerability in maven package org.rundeck:rundeck-core
CVE-2022-34112 Vulnerability in maven package io.dataease:dataease-plugin-common