Security Advisory
CVE-2023-22975
6.1
MEDIUM
Vulnerability Description
A cross-site scripting (XSS) vulnerability in JFinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the email parameter under /front/person/profile.html.
Published Date
February 3, 2023
Official Source
NIST NVD Advisory