JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) in the site management office.
References:GSA_kwCzR0hTQS14djdwLWp3NDYtOHI4Nc4AA3xe
Cross-site Scripting in JFinalcms
| Affected Packages | Affected Versions | Fixed Versions | |
|---|---|---|---|
| maven:com.jfinal:jfinal | <= 5.0.0 | No known fixed version | |
Affected Version RangesAll affected versions1.4.0, 4.9.1, 4.9.2, 4.9.3, 4.9.4, 4.9.5, 4.9.6, 4.9.7, 4.9.8, 4.9.9, 4.9.10, 4.9.11, 4.9.12, 4.9.13, 4.9.14, 4.9.15, 4.9.16, 4.9.17, 4.9.18, 4.9.19, 4.9.20, 4.9.21, 4.9.22, 4.9.23, 5.0.0 |
|||