Security Advisory

CVE-2020-19148

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2021-09-15 13:52:49

Last updated 2024-08-04 14:08:30

Assigner mitre

State PUBLISHED

Description

Cross Site Scripting (XSS) in Jfinal CMS v4.7.1 and earlier allows remote attackers to execute arbitrary code via the Nickname parameter in the component /jfinal_cms/front/person/profile.html.

← Browse all CVEs View on cve.org ↗