CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 02/02/2024 |
| CVE-2024-22497 | 中危6.1 | Cross Site Scripting (XSS) vulnerability in /admin/login password parameter in JFinalcms 5.0.0 allows attackers to run arbitrary code via crafted URL. | 23/01/2024 |
| CVE-2024-22496 | 中危6.1 | Cross Site Scripting (XSS) vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary code via the /admin/login username parameter. | 23/01/2024 |
| CVE-2024-22494 | 中危5.4 | A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save mobile parameter, which allows remote attackers to inject arbitrary web script or HTML. | 12/01/2024 |
| CVE-2024-22493 | 中危5.4 | A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save content parameter, which allows remote attackers to inject arbitrary web script or HTML. | 12/01/2024 |
| CVE-2024-22492 | 中危5.4 | A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save contact parameter, which allows remote attackers to inject arbitrary web script or HTML. | 12/01/2024 |
| CVE-2023-50136 | 中危5.4 | Cross Site Scripting (XSS) vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary code via the name field when creating a new custom table. | 09/01/2024 |
| CVE-2023-50137 | 中危5.4 | JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) in the site management office. | 14/12/2023 |
| CVE-2023-50102 | 中危5.4 | JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS). | 14/12/2023 |
| CVE-2023-50101 | 中危5.4 | JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) via Label management editing. | 14/12/2023 |
| CVE-2023-50100 | 中危5.4 | JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) via carousel image editing. | 14/12/2023 |
| CVE-2023-50449 | 高危7.5 | JFinalCMS 5.0.0 could allow a remote attacker to read files via ../ Directory Traversal in the /common/down/file fileKey parameter. | 10/12/2023 |
| CVE-2023-49487 | 中危5.4 | JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the navigation management department. | 08/12/2023 |
| CVE-2023-49486 | 中危5.4 | JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the model management department. | 08/12/2023 |
| CVE-2023-49485 | 中危5.4 | JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the column management department. | 08/12/2023 |
| CVE-2023-49448 | 高危8.8 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via admin/nav/delete. | 05/12/2023 |
| CVE-2023-49447 | 高危8.8 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/nav/update. | 05/12/2023 |