CVE-2023-49486

JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the model management department.

Score

CVSS 3.1 5.4 Medium

Status

Modified - cve@mitre.org

Published

2023-12-08

Last modified

2024-08-02

Weaknesses

CWE-79

Affected products

• Jfinalcms (Jfinalcms Project)

References

• https://github.com/Rabb1ter/cms/blob/main/There%20is%20a%20stored%20XSS%20in%20the%20model%20management%20department.md