Vulnerabilidades
Resumen — últimos 7 días
Vulnerabilidades nuevas2980▼ 83 respecto a la semana anterior
Críticas / altas1452▲ 101 respecto a la semana anterior
Nueva explotación activa (KEV)4▼ 5 respecto a la semana anterior
Sin puntuar (sin CVSS)353▼ 157 respecto a la semana anterior
129 resultados, ordenados por fecha de publicación (más recientes primero)
| CVE | Estado | Severidad | EPSS | Explotación activa | Tecnologías afectadas | Publicada ▼ | Modificada | Descripción |
|---|---|---|---|---|---|---|---|---|
| Modificada | Media (6.1) | 0.43% | — | Jfinalcms Project Jfinalcms | 23/1/2024 | 17/6/2026 | Cross Site Scripting (XSS) vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary code via the /admin/login username parameter. | |
| Modificada | Media (5.4) | 0.47% | — | Jfinalcms Project Jfinalcms | 12/1/2024 | 17/6/2026 | A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save mobile parameter, which allows remote attackers to inject arbitrary web script or HTML. | |
| Modificada | Media (5.4) | 0.56% | — | Jfinalcms Project Jfinalcms | 12/1/2024 | 17/6/2026 | A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save content parameter, which allows remote attackers to inject arbitrary web script or HTML. | |
| Modificada | Media (5.4) | 0.56% | — | Jfinalcms Project Jfinalcms | 12/1/2024 | 17/6/2026 | A stored XSS vulnerability exists in JFinalcms 5.0.0 via the /gusetbook/save contact parameter, which allows remote attackers to inject arbitrary web script or HTML. | |
| Modificada | Media (5.4) | 0.41% | — | Jfinalcms Project Jfinalcms | 9/1/2024 | 17/6/2026 | Cross Site Scripting (XSS) vulnerability in JFinalcms 5.0.0 allows attackers to run arbitrary code via the name field when creating a new custom table. | |
| Modificada | Media (5.4) | 0.46% | — | Jfinalcms Project Jfinalcms | 14/12/2023 | 17/6/2026 | JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) in the site management office. | |
| Modificada | Media (5.4) | 0.43% | — | Jfinalcms Project Jfinalcms | 14/12/2023 | 17/6/2026 | JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS). | |
| Modificada | Media (5.4) | 0.44% | — | Jfinalcms Project Jfinalcms | 14/12/2023 | 17/6/2026 | JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) via Label management editing. | |
| Modificada | Media (5.4) | 0.44% | — | Jfinalcms Project Jfinalcms | 14/12/2023 | 17/6/2026 | JFinalcms 5.0.0 is vulnerable to Cross Site Scripting (XSS) via carousel image editing. | |
| Modificada | Alta (7.5) | 1.2% | — | Jfinalcms Project Jfinalcms | 10/12/2023 | 17/6/2026 | JFinalCMS 5.0.0 could allow a remote attacker to read files via ../ Directory Traversal in the /common/down/file fileKey parameter. | |
| Modificada | Media (5.4) | 0.41% | — | Jfinalcms Project Jfinalcms | 8/12/2023 | 17/6/2026 | JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the navigation management department. | |
| Modificada | Media (5.4) | 0.42% | — | Jfinalcms Project Jfinalcms | 8/12/2023 | 17/6/2026 | JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the model management department. | |
| Modificada | Media (5.4) | 0.41% | — | Jfinalcms Project Jfinalcms | 8/12/2023 | 17/6/2026 | JFinalCMS v5.0.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the column management department. | |
| Modificada | Alta (8.8) | 0.39% | — | Jfinalcms Project Jfinalcms | 5/12/2023 | 17/6/2026 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via admin/nav/delete. | |
| Modificada | Alta (8.8) | 0.39% | — | Jfinalcms Project Jfinalcms | 5/12/2023 | 17/6/2026 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/nav/update. | |
| Modificada | Alta (8.8) | 0.39% | — | Jfinalcms Project Jfinalcms | 5/12/2023 | 17/6/2026 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/nav/save. | |
| Modificada | Alta (8.8) | 0.39% | — | Jfinalcms Project Jfinalcms | 5/12/2023 | 17/6/2026 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/delete. | |
| Modificada | Alta (8.8) | 0.39% | — | Jfinalcms Project Jfinalcms | 5/12/2023 | 17/6/2026 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/updateStatus. | |
| Modificada | Alta (8.8) | 0.39% | — | Jfinalcms Project Jfinalcms | 5/12/2023 | 17/6/2026 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/save. | |
| Modificada | Alta (8.8) | 0.39% | — | Jfinalcms Project Jfinalcms | 5/12/2023 | 17/6/2026 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/update. | |
| Modificada | Alta (8.8) | 0.39% | — | Jfinalcms Project Jfinalcms | 5/12/2023 | 17/6/2026 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/tag/save. | |
| Modificada | Alta (8.8) | 0.39% | — | Jfinalcms Project Jfinalcms | 5/12/2023 | 17/6/2026 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/div/delete. | |
| Modificada | Alta (8.8) | 0.39% | — | Jfinalcms Project Jfinalcms | 5/12/2023 | 17/6/2026 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/div/update. | |
| Modificada | Alta (8.8) | 0.39% | — | Jfinalcms Project Jfinalcms | 5/12/2023 | 17/6/2026 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/friend_link/delete. | |
| Modificada | Alta (8.8) | 0.40% | — | Jfinalcms Project Jfinalcms | 5/12/2023 | 17/6/2026 | JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via the component /admin/friend_link/save. |