CVE-2021-33348: Cross-site scripting in jfinal – CVSS 6.1 · Watchpost