5.3
Medium
CVE-2024-8782 A vulnerability was found in JFinalCMS up to 1.0
Description
A vulnerability was found in JFinalCMS up to 1.0. It has been rated as critical. This issue affects the function delete of the file /admin/template/edit. The manipulation of the argument name leads to path traversal. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected products and versions
Other CVEs of jfinalcms
The 11 CVEs of jfinalcms →
CVE-2024-12351
A vulnerability classified as critical has been found in JFinalCMS 1.0
5.3
Medium
CVE-2024-12350
A vulnerability was found in JFinalCMS 1.0
5.3
Medium
CVE-2024-12349
A vulnerability was found in JFinalCMS 1.0
6.9
Medium
CVE-2024-8706
A vulnerability was found in JFinalCMS up to 20240903
5.3
Medium