CVE-2020-19148 | BDVDB-2026-160902 Detail

Description#

Cross Site Scripting (XSS) in Jfinal CMS v4.7.1 and earlier allows remote attackers to execute arbitrary code via the 'Nickname' parameter in the component '/jfinal_cms/front/person/profile.html'.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.seebug.org/vuldb/ssvid-97879

Exploit#

No public exploit known

History#

Version 12021-09-15Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.