CVE-2023-51254
MEDIUM 6.1EPSS 0.6%
Cross Site Scripting vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to execute arbitrary code via a crafted script to the friendship link component.
- CVSS v3.1 CNA
- 6.1 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N - EPSS
- 0.55% chance of exploitation in the next 30 days, 45th percentile
- Published
- 2024-04-29
- Updated
- 2024-08-06
Proof-of-concept exploits (1)
- yukino-hiki/CVE/blob/main/4/There%20is%20a%20stored%20xss%20at%20the%20friendship%20link…0★ · 2023-12-15