CVE-2023-22975
03.02.2023, 17:15
A cross-site scripting (XSS) vulnerability in JFinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter under /front/person/profile.html.
| Vendor | Product | Version |
|---|---|---|
| jflyfox | jfinal_cms | 5.1.0 |
𝑥
= Vulnerable software versions