medium6.1
CVE-2023-51254
Cross Site Scripting vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to execute arbitrary code via a crafted script to the friendship link componen…
Impact
Cross Site Scripting vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to execute arbitrary code via a crafted script to the friendship link component.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Jfinalcms Project | Jfinalcms | Version 5.0.0 |