CVE-2024-5379

LOW

JFinalCMS <20240111 - XSS

Title source: llm

Description

A vulnerability was found in JFinalCMS up to 20240111. It has been rated as problematic. This issue affects some unknown processing of the file /admin/template. The manipulation of the argument directory leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-266291.

Exploits (1)

gitee 541 stars

by heyewei · javawriteup

https://gitee.com/heyewei/JFinalcms/issues/I8VHGR

References (3)

[Exploit, Issue Tracking, Vendor Advisory] https://gitee.com/heyewei/JFinalcms/issues/I8VHGR

[Permissions Required, VDB Entry] https://vuldb.com/?ctiid.266291

[Third Party Advisory, VDB Entry] https://vuldb.com/?id.266291

Scores

CVSS v3 3.5

EPSS 0.0095

EPSS Percentile 76.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

Details

CWE

CWE-79

Status published

Products (1)

heyewei/jfinalcms < 20240111

Published May 26, 2024

Tracked Since Feb 18, 2026