Description
JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) in the site management office.
Remediation
References
https://github.com/yukino-hiki/CVE/blob/main/3/There%20is%20a%20storage%20type%20xss%20in%20the%20site%20management%20office.md
Related Vulnerabilities
CVE-2017-16096 Vulnerability in npm package serveryaozeyan
CVE-2020-8149 Vulnerability in npm package logkitty
CVE-2013-1571 Vulnerability in maven package org.apache.tomcat:catalina
CVE-2020-7642 Vulnerability in maven package org.webjars.bowergithub.afarkas:lazysizes
CVE-2019-5427 Vulnerability in maven package com.mchange:c3p0