Description
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) in the site management office.
Remediation
References
https://github.com/yukino-hiki/CVE/blob/main/3/There%20is%20a%20storage%20type%20xss%20in%20the%20site%20management%20office.md
Related Vulnerabilities
CVE-2016-10735 Vulnerability in maven package org.webjars.npm:bootstrap
CVE-2019-5479 Vulnerability in npm package larvitbase-api
CVE-2023-29518 Vulnerability in maven package org.xwiki.platform:xwiki-platform-invitation-ui
CVE-2021-4279 Vulnerability in npm package fast-json-patch
CVE-2014-0074 Vulnerability in maven package org.apache.shiro:shiro-core