Security Advisory

CVE-2024-22493

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-01-12 00:00:00
Last updated 2024-09-10 20:31:13
Assigner mitre
State PUBLISHED

Description

A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save content parameter, which allows remote attackers to inject arbitrary web script or HTML.