CVE-2022-27111

Name of the Vulnerable Software and Affected Versions Jfinal CMS version 5.1.0

Description The issue allows attackers to use the feedback function to send malicious XSS code to the administrator backend and execute it. This can potentially lead to unauthorized access or control of the administrator backend.

Recommendations For Jfinal CMS version 5.1.0, consider disabling the feedback function until a patch is available to prevent the execution of malicious XSS code. Restrict access to the administrator backend to minimize the risk of exploitation.