← All advisories

Medium severity5.4NVD Advisory· Published Apr 5, 2023· Updated Jun 17, 2026

CVE-2023-24747

CVE-2023-24747

Description

Jfinal CMS v5.1 was discovered to contain a cross-site scripting (XSS) vulnerability via the component /system/dict/list.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Jflyfox/Jfinal CMS
cpe:2.3:a:jflyfox:jfinal_cms:5.1:*:*:*:*:*:*:*
Jfinal CMS/Jfinal CMSdescription
Jfinal/Jfinalllm-fuzzy
Range: =5.1

Patches

Vulnerability mechanics

References

1

gist.github.com/Threonic/a262c19ed5027e5a7fe0b97b62b10a08nvdThird Party Advisory

News mentions

0

No linked articles in our index yet.