Description
A cross-site scripting (XSS) vulnerability in Jfinal CMS v5.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted X-Forwarded-For request.
Remediation
References
https://github.com/jflyfox/jfinal_cms/issues/34
Related Vulnerabilities
CVE-2022-26612 Vulnerability in maven package org.apache.hadoop:hadoop-common
CVE-2021-23797 Vulnerability in npm package http-server-node
CVE-2021-25947 Vulnerability in npm package nestie
CVE-2020-35149 Vulnerability in npm package mquery
CVE-2020-9498 Vulnerability in maven package org.apache.guacamole:guacamole