CVE-2021-46087

In jfinal_cms >= 5.1 0, there is a storage XSS vulnerability in the background system of CMS

published January 25, 2022

CVSS
—
EPSS
1%
Percentile
42.1
In the wild
Unconfirmed
What it is

In jfinal_cms >= 5.1 0, there is a storage XSS vulnerability in the background system of CMS. Because developers do not filter the parameters submitted by the user input form, any user with background permission can affect the system security by entering malicious code.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00503 · 42.1th percentile
Published
2022-01-25T15:56Z
EPSS history
Timeline
  • 25 JAN 15:56Z
    In jfinal_cms >= 5.1 0, there is a storage XSS vulnerability in the background system of CMS
    cvelistv5