Vulnerability Database

309,364

Total vulnerabilities in the database

CVE-2024-5310

A vulnerability classified as problematic has been found in JFinalCMS up to 20221020. This affects an unknown part of the file /admin/content. The manipulation of the argument Title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-266121 was assigned to this vulnerability.

  • Published: May 24, 2024
  • Updated: Nov 16, 2025
  • CVE: CVE-2024-5310
  • Severity: Low
  • Exploit:

CVSS v3:

  • Severity: Low
  • Score: 2.4
  • AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:L/A:N

CVSS v2:

  • Severity: Low
  • Score: 3.3
  • AV:N/AC:L/Au:M/C:N/I:P/A:N

CWEs:

OWASP TOP 10:

Software From Fixed in
heyewei / jfinalcms - 20221020