CVE-2021-46087
PoC —CVSS 3.1
5.4 medium
EPSS
<1%p42
Published
()
Modified
Description
In jfinal_cms >= 5.1 0, there is a storage XSS vulnerability in the background system of CMS. Because developers do not filter the parameters submitted by the user input form, any user with background permission can affect the system security by entering malicious code.
- Vendors
- jflyfox
- Products
- jfinal cms
- Weakness
- CWE-79
- Vector
- CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
In the news0 stories
No ingested article mentions this CVE yet.