GHSA-qh2w-9m7w-hjg2
Cross-site Scripting in JFinal
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Maven | com.jfinal:jfinal | <= 5.0.0 | no fix listed |
Details
As written in the advisory (Markdown source, shown as plain text).
Cross Site Scripting (XSS) vulnerability in /admin/login password parameter in JFinalcms 5.0.0 allows attackers to run arbitrary code via crafted URL.
References
External links from the advisory. They lead to third-party sites.