PT-2022-18229
CVE-2022-27111
·
تاريخ النشر
2022-04-11
·
تاريخ التحديث
2022-04-15
الوصف من
CVSS 3.1
5.4
متوسطةالمقاييسAV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions
Jfinal CMS version 5.1.0
Description
The issue allows attackers to use the feedback function to send malicious XSS code to the administrator backend and execute it. This can potentially lead to unauthorized access or control of the administrator backend.
Recommendations
For Jfinal CMS version 5.1.0, consider disabling the feedback function until a patch is available to prevent the execution of malicious XSS code. Restrict access to the administrator backend to minimize the risk of exploitation.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾