JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the model management department.
References:GSA_kwCzR0hTQS1oamZwLTJqN3EteG14NM4AA3ot
Cross-site Scripting in JFinalCMS
| Affected Packages | Affected Versions | Fixed Versions | |
|---|---|---|---|
| maven:com.jfinal:jfinal | <= 5.0.0 | No known fixed version | |
Affected Version RangesAll affected versions1.4.0, 4.9.1, 4.9.2, 4.9.3, 4.9.4, 4.9.5, 4.9.6, 4.9.7, 4.9.8, 4.9.9, 4.9.10, 4.9.11, 4.9.12, 4.9.13, 4.9.14, 4.9.15, 4.9.16, 4.9.17, 4.9.18, 4.9.19, 4.9.20, 4.9.21, 4.9.22, 4.9.23, 5.0.0 |
|||