CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 02/02/2024 |
| CVE-2024-22497 | MITTEL6.1 | Cross Site Scripting (XSS) vulnerability in /admin/login password parameter in JFinalcms 5.0.0 allows attackers to run arbitrary code via crafted URL. | 23/01/2024 |
| CVE-2024-22496 | MITTEL6.1 | Cross Site Scripting (XSS) vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary code via the /admin/login username parameter. | 23/01/2024 |
| CVE-2024-22494 | MITTEL5.4 | A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save mobile parameter, which allows remote attackers to inject arbitrary web script or HTML. | 12/01/2024 |
| CVE-2024-22493 | MITTEL5.4 | A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save content parameter, which allows remote attackers to inject arbitrary web script or HTML. | 12/01/2024 |
| CVE-2024-22492 | MITTEL5.4 | A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save contact parameter, which allows remote attackers to inject arbitrary web script or HTML. | 12/01/2024 |
| CVE-2023-50136 | MITTEL5.4 | Cross Site Scripting (XSS) vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary code via the name field when creating a new custom table. | 09/01/2024 |
| CVE-2023-50137 | MITTEL5.4 | JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) in the site management office. | 14/12/2023 |
| CVE-2023-50102 | MITTEL5.4 | JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS). | 14/12/2023 |
| CVE-2023-50101 | MITTEL5.4 | JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) via Label management editing. | 14/12/2023 |
| CVE-2023-50100 | MITTEL5.4 | JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) via carousel image editing. | 14/12/2023 |
| CVE-2023-50449 | HOCH7.5 | JFinalCMS 5.0.0 could allow a remote attacker to read files via ../ Directory Traversal in the /common/down/file fileKey parameter. | 10/12/2023 |
| CVE-2023-49487 | MITTEL5.4 | JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the navigation management department. | 08/12/2023 |
| CVE-2023-49486 | MITTEL5.4 | JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the model management department. | 08/12/2023 |
| CVE-2023-49485 | MITTEL5.4 | JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the column management department. | 08/12/2023 |
| CVE-2023-49448 | HOCH8.8 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via admin/nav/delete. | 05/12/2023 |
| CVE-2023-49447 | HOCH8.8 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/nav/update. | 05/12/2023 |