Jfinalcms Project vulnerabilities

Products

• Jfinalcms 47

Newest

• heyewei jfinalcms JFinalCMS File Content ContentModel.java findPage sql injection CVE-2024-12351 5.3 MediumDecember 9, 2024
• heyewei jfinalcms JFinalCMS Template TemplateController.java update command injection CVE-2024-12350 5.3 MediumDecember 9, 2024
• heyewei jfinalcms JFinalCMS save cross-site request forgery CVE-2024-12349 6.9 MediumDecember 9, 2024
• heyewei jfinalcms JFinalCMS edit delete path traversal CVE-2024-8782 5.3 MediumSeptember 13, 2024
• heyewei jfinalcms JFinalCMS com.cms.util.TemplateUtils update path traversal CVE-2024-8706 5.3 MediumSeptember 11, 2024
• heyewei jfinalcms JFinalCMS com.cms.controller.admin.TemplateController update path traversal CVE-2024-8694 5.1 MediumSeptember 11, 2024
• jfinalcms project jfinalcms An issue was discovered in JFinalCMS v.5.0.0. There is a SQL injection vulnerablity via /admin... CVE-2024-40322 8.8 HighJuly 16, 2024
• heyewei jfinalcms JFinalCMS template cross site scripting CVE-2024-5379 5.3 MediumMay 26, 2024
• jfinalcms project jfinalcms Cross Site Scripting vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to execute... CVE-2023-51254 6.1 MediumApril 29, 2024
• heyewei jfinalcms heyewei JFinalCMS Custom Data Page sql injection CVE-2024-2568 4.7 MediumMarch 17, 2024
• jfinalcms project jfinalcms SQL injection vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to obtain sensitive... CVE-2024-24375 7.5 HighMarch 7, 2024
• jfinalcms project jfinalcms JFinalCMS 5.0.0 is vulnerable to SQL injection via /admin/content/data. CVE-2024-24029 9.8 CriticalFebruary 2, 2024
• jfinalcms project jfinalcms Cross-site Scripting in JFinal CVE-2024-22497 6.1 MediumJanuary 23, 2024
• jfinalcms project jfinalcms Cross-site Scripting in JFinal CVE-2024-22496 6.1 MediumJanuary 23, 2024
• jfinalcms project jfinalcms A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save mobile parameter,... CVE-2024-22494 5.4 MediumJanuary 12, 2024
• jfinalcms project jfinalcms Cross-site Scripting in JFinal CVE-2024-22493 5.4 MediumJanuary 12, 2024
• jfinalcms project jfinalcms Cross-site Scripting in JFinal CVE-2024-22492 5.4 MediumJanuary 12, 2024
• jfinalcms project jfinalcms Cross Site Scripting (XSS) vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary... CVE-2023-50136 5.4 MediumJanuary 9, 2024
• jfinalcms project jfinalcms Cross-site Scripting in JFinalcms CVE-2023-50137 5.4 MediumDecember 14, 2023
• jfinalcms project jfinalcms Cross-site Scripting in JFinalcms CVE-2023-50102 5.4 MediumDecember 14, 2023
• jfinalcms project jfinalcms Cross-site Scripting in JFinalcms CVE-2023-50101 5.4 MediumDecember 14, 2023
• jfinalcms project jfinalcms Cross-site Scripting in JFinalcms CVE-2023-50100 5.4 MediumDecember 14, 2023
• jfinalcms project jfinalcms Directory Traversal in JFinalCMS CVE-2023-50449 7.5 HighDecember 10, 2023
• jfinalcms project jfinalcms Cross-site Scripting in JFinalCMS CVE-2023-49487 5.4 MediumDecember 8, 2023
• jfinalcms project jfinalcms Cross-site Scripting in JFinalCMS CVE-2023-49486 5.4 MediumDecember 8, 2023
• jfinalcms project jfinalcms Cross-site Scripting in JFinalCMS CVE-2023-49485 5.4 MediumDecember 8, 2023
• jfinalcms project jfinalcms Cross-Site Request Forgery in JFinalCMS via admin/nav/delete CVE-2023-49448 8.8 HighDecember 5, 2023
• jfinalcms project jfinalcms Cross-Site Request Forgery in JFinalCMS via /admin/nav/update CVE-2023-49447 8.8 HighDecember 5, 2023
• jfinalcms project jfinalcms Cross-Site Request Forgery in JFinalCMS via /admin/nav/save CVE-2023-49446 8.8 HighDecember 5, 2023
• jfinalcms project jfinalcms Cross-Site Request Forgery in JFinalCMS via /admin/category/delete CVE-2023-49398 8.8 HighDecember 5, 2023
• jfinalcms project jfinalcms Cross-Site Request Forgery in JFinalCMS via /admin/category/updateStatus CVE-2023-49397 8.8 HighDecember 5, 2023
• jfinalcms project jfinalcms Cross-Site Request Forgery in JFinalCMS via /admin/category/save CVE-2023-49396 8.8 HighDecember 5, 2023
• jfinalcms project jfinalcms Cross-Site Request Forgery in JFinalCMS via /admin/category/update CVE-2023-49395 8.8 HighDecember 5, 2023
• jfinalcms project jfinalcms Cross-Site Request Forgery in JFinalCMS via /admin/tag/save CVE-2023-49383 8.8 HighDecember 5, 2023
• jfinalcms project jfinalcms Cross-Site Request Forgery in JFinalCMS via /admin/div/delete CVE-2023-49382 8.8 HighDecember 5, 2023
• jfinalcms project jfinalcms Cross-Site Request Forgery in JFinalCMS via /admin/div/update CVE-2023-49381 8.8 HighDecember 5, 2023
• jfinalcms project jfinalcms Cross-Site Request Forgery in JFinalCMS via /admin/friend_link/delete CVE-2023-49380 8.8 HighDecember 5, 2023
• jfinalcms project jfinalcms Cross-Site Request Forgery in JFinalCMS via the component /admin/friend_link/save CVE-2023-49379 8.8 HighDecember 5, 2023
• jfinalcms project jfinalcms Cross-Site Request Forgery in JFinalCMS via /admin/form/save CVE-2023-49378 8.8 HighDecember 5, 2023
• jfinalcms project jfinalcms Cross-Site Request Forgery in JFinalCMS via /admin/tag/update CVE-2023-49377 8.8 HighDecember 5, 2023
• jfinalcms project jfinalcms Cross-Site Request Forgery in JFinalCMS CVE-2023-49376 8.8 HighDecember 5, 2023
• jfinalcms project jfinalcms Cross-Site Request Forgery in JFinalCMS via /admin/friend_link/update CVE-2023-49375 8.8 HighDecember 5, 2023
• jfinalcms project jfinalcms Cross-Site Request Forgery in JFinalCMS via /admin/slide/update CVE-2023-49374 8.8 HighDecember 5, 2023
• jfinalcms project jfinalcms Cross-Site Request Forgery in JFinalCMS CVE-2023-49373 8.8 HighDecember 5, 2023
• jfinalcms project jfinalcms Cross-Site Request Forgery in JFinalCMS CVE-2023-49372 8.8 HighDecember 5, 2023
• jfinalcms project jfinalcms An issue in the component /common/DownController.java of JFinalCMS v5.0.0 allows attackers to... CVE-2023-41599 EPSS 12.4% 5.3 MediumSeptember 19, 2023
• jfinalcms project jfinalcms JFinalCMS v2.0 was discovered to contain a SQL injection vulnerability via the Article Management... CVE-2022-27341 9.8 CriticalApril 22, 2022