TI-2026-01849 CVE-2026-2200 · GHSA-xhf6-49gh-77cw
heyewei JFinalCMS API Endpoint save cross site scripting
Priority MEDIUM 55
A weakness has been identified in heyewei JFinalCMS 5.0.0.
Vulnerabilities
9 records
TI-2024-38015 CVE-2024-57665 · GHSA-75x9-5mr4-583v
JFinalCMS 1.0 is vulnerable to SQL Injection in rc/main/java/com/cms/entity/Content.java.
Priority HIGH 82
JFinalCMS 1.0 is vulnerable to SQL Injection in rc/main/java/com/cms/entity/Content.java.
TI-2024-08148 CVE-2024-8782 · GHSA-fwj7-298v-7488
JFinalCMS edit delete path traversal
Priority MEDIUM 57
A vulnerability was found in JFinalCMS up to 1.0.
TI-2024-08075 CVE-2024-8706 · GHSA-fmrw-pfr8-r4j7
JFinalCMS com.cms.util.TemplateUtils update path traversal
Priority MEDIUM 57
A vulnerability was found in JFinalCMS up to 20240903.
TI-2024-08064 CVE-2024-8694 · GHSA-mx92-jwq3-h28x
JFinalCMS com.cms.controller.admin.TemplateController update path traversal
Priority MEDIUM 56
A vulnerability, which was classified as problematic, was found in JFinalCMS up to 20240903.
TI-2024-06063 CVE-2024-6539 · GHSA-57wx-64w4-pwjp
heyewei SpringBootCMS Guestbook guestbook cross site scripting
Priority MEDIUM 57
A vulnerability classified as problematic has been found in heyewei SpringBootCMS up to 2024-05-28.
TI-2024-04998 CVE-2024-5379
JFinalCMS template cross site scripting
Priority LOW 24
A vulnerability was found in JFinalCMS up to 20240111.
TI-2024-04933 CVE-2024-5310
JFinalCMS content cross site scripting
Priority MEDIUM 56
A vulnerability classified as problematic has been found in JFinalCMS up to 20221020.
TI-2024-02388 CVE-2024-2568 · GHSA-2wxc-99ff-4mwq
heyewei JFinalCMS Custom Data Page sql injection
Priority HIGH 65
A vulnerability has been found in heyewei JFinalCMS 5.0.0 and classified as critical.