Vulnerabilities > Jfinalcms Project > High

DATE CVE VULNERABILITY TITLE RISK
2023-12-05 CVE-2023-49380 Cross-Site Request Forgery (CSRF) vulnerability in Jfinalcms Project Jfinalcms 5.0.0
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/friend_link/delete.
network
low complexity
jfinalcms-project CWE-352
8.8
2023-12-05 CVE-2023-49381 Cross-Site Request Forgery (CSRF) vulnerability in Jfinalcms Project Jfinalcms 5.0.0
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/div/update.
network
low complexity
jfinalcms-project CWE-352
8.8
2023-12-05 CVE-2023-49382 Cross-Site Request Forgery (CSRF) vulnerability in Jfinalcms Project Jfinalcms 5.0.0
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/div/delete.
network
low complexity
jfinalcms-project CWE-352
8.8
2023-12-05 CVE-2023-49383 Cross-Site Request Forgery (CSRF) vulnerability in Jfinalcms Project Jfinalcms 5.0.0
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/tag/save.
network
low complexity
jfinalcms-project CWE-352
8.8
2023-12-05 CVE-2023-49395 Cross-Site Request Forgery (CSRF) vulnerability in Jfinalcms Project Jfinalcms 5.0.0
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/update.
network
low complexity
jfinalcms-project CWE-352
8.8
2023-12-05 CVE-2023-49396 Cross-Site Request Forgery (CSRF) vulnerability in Jfinalcms Project Jfinalcms 5.0.0
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/save.
network
low complexity
jfinalcms-project CWE-352
8.8
2023-12-05 CVE-2023-49397 Cross-Site Request Forgery (CSRF) vulnerability in Jfinalcms Project Jfinalcms 5.0.0
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/updateStatus.
network
low complexity
jfinalcms-project CWE-352
8.8
2023-12-05 CVE-2023-49398 Cross-Site Request Forgery (CSRF) vulnerability in Jfinalcms Project Jfinalcms 5.0.0
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/delete.
network
low complexity
jfinalcms-project CWE-352
8.8
2023-12-05 CVE-2023-49446 Cross-Site Request Forgery (CSRF) vulnerability in Jfinalcms Project Jfinalcms 5.0.0
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/nav/save.
network
low complexity
jfinalcms-project CWE-352
8.8
2023-12-05 CVE-2023-49447 Cross-Site Request Forgery (CSRF) vulnerability in Jfinalcms Project Jfinalcms 5.0.0
JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/nav/update.
network
low complexity
jfinalcms-project CWE-352
8.8