Medium severity6.1NVD Advisory· Published Apr 29, 2024· Updated Jun 17, 2026
CVE-2023-51254
CVE-2023-51254
Description
Cross Site Scripting vulnerability in Jfinalcms v.5.0.0 allows a remote attacker to execute arbitrary code via a crafted script to the friendship link component.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:jfinalcms_project:jfinalcms:5.0.0:*:*:*:*:*:*:*
- Jfinalcms/Jfinalcmsdescription
Patches
Vulnerability mechanics
References
1- github.com/yukino-hiki/CVE/blob/main/4/There%20is%20a%20stored%20xss%20at%20the%20friendship%20link.mdnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.