CVE-2022-27111

MEDIUM CVSS: 5.4 Published: 2022-04-11 Modified: 2026-06-17

Description

Jfinal_CMS 5.1.0 allows attackers to use the feedback function to send malicious XSS code to the administrator backend and execute it.

Affected Platforms

Jflyfox Jfinal Cms

Weakness Type

CWE-79

References