CVE-2021-33348

An issue was discovered in JFinal framework v4.9.10 and below

published June 24, 2021

CVSS
—
EPSS
1%
Percentile
50.1
In the wild
Unconfirmed
What it is

An issue was discovered in JFinal framework v4.9.10 and below. The "set" method of the "Controller" class of jfinal framework is not strictly filtered, which will lead to XSS vulnerabilities in some cases.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00641 · 50.1th percentile
Published
2021-06-24T14:10Z
EPSS history
Timeline
  • 24 JUN 14:10Z
    An issue was discovered in JFinal framework v4.9.10 and below
    cvelistv5