CVE-2024-5310CWE-79

JFinalCMS content cross site scripting

Medium · published May 24, 2024

CVSS v4.0

5.1

EPSS

Percentile

29.1

In the wild

Unconfirmed

What it is

A vulnerability classified as problematic has been found in JFinalCMS up to 20221020. This affects an unknown part of the file /admin/content. The manipulation of the argument Title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-266121 was assigned to this vulnerability.

The record

Technical detail

CVSS v4.0: 5.1 · MEDIUM
Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS: 0.00364 · 29.1th percentile
Weakness: CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published: 2024-05-24T09:00Z

EPSS history

Timeline

24 MAY 09:00Z
JFinalCMS content cross site scripting
cvelistv5