CVE-2024-22492

Maven/com.jfinal:jfinal CVE-2024-22492: medium 5.4, EPSS 0.56%

Cross-site Scripting in JFinal

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GHSA-859h-4w58-78xw
• https://nvd.nist.gov/vuln/detail/CVE-2024-22492
• https://github.com/cui2shark/security/blob/main/%28JFinalcms%20contact%20para%29A%20stored%20cross-site%20scripting%20%28XSS%29%20vulnerability%20was%20discovered%20in%20Jfinalcms%20contact%20para.md

CVE-2024-22492 · published 2024-01-12T18:30:20Z · modified 2024-02-16T08:21:05.318809Z · JSON