CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 02/02/2024 |
| CVE-2024-22497 | 보통6.1 | Cross Site Scripting (XSS) vulnerability in /admin/login password parameter in JFinalcms 5.0.0 allows attackers to run arbitrary code via crafted URL. | 23/01/2024 |
| CVE-2024-22496 | 보통6.1 | Cross Site Scripting (XSS) vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary code via the /admin/login username parameter. | 23/01/2024 |
| CVE-2024-22494 | 보통5.4 | A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save mobile parameter, which allows remote attackers to inject arbitrary web script or HTML. | 12/01/2024 |
| CVE-2024-22493 | 보통5.4 | A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save content parameter, which allows remote attackers to inject arbitrary web script or HTML. | 12/01/2024 |
| CVE-2024-22492 | 보통5.4 | A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save contact parameter, which allows remote attackers to inject arbitrary web script or HTML. | 12/01/2024 |
| CVE-2023-50136 | 보통5.4 | Cross Site Scripting (XSS) vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary code via the name field when creating a new custom table. | 09/01/2024 |
| CVE-2023-50137 | 보통5.4 | JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) in the site management office. | 14/12/2023 |
| CVE-2023-50102 | 보통5.4 | JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS). | 14/12/2023 |
| CVE-2023-50101 | 보통5.4 | JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) via Label management editing. | 14/12/2023 |
| CVE-2023-50100 | 보통5.4 | JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) via carousel image editing. | 14/12/2023 |
| CVE-2023-50449 | 높음7.5 | JFinalCMS 5.0.0 could allow a remote attacker to read files via ../ Directory Traversal in the /common/down/file fileKey parameter. | 10/12/2023 |
| CVE-2023-49487 | 보통5.4 | JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the navigation management department. | 08/12/2023 |
| CVE-2023-49486 | 보통5.4 | JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the model management department. | 08/12/2023 |
| CVE-2023-49485 | 보통5.4 | JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the column management department. | 08/12/2023 |
| CVE-2023-49448 | 높음8.8 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via admin/nav/delete. | 05/12/2023 |
| CVE-2023-49447 | 높음8.8 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/nav/update. | 05/12/2023 |