CVE-2022-27111

Jfinal_CMS 5.1.0 allows attackers to use the feedback function to send malicious XSS code to the administrator backend and execute it

published April 11, 2022

CVSS
—
EPSS
0%
Percentile
41.0
In the wild
Unconfirmed
What it is

Jfinal_CMS 5.1.0 allows attackers to use the feedback function to send malicious XSS code to the administrator backend and execute it.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00487 · 41.0th percentile
Published
2022-04-11T14:43Z
EPSS history
Timeline
  • 11 APR 14:43Z
    Jfinal_CMS 5.1.0 allows attackers to use the feedback function to send malicious XSS code to the administrator backend and execute it
    cvelistv5