CVE's - CVE Vulnerability

CVE

Vendors

Products

Updated

CVSS v2

CVSS v3

CVE-2022-38283

2022-09-13

N/A

7.2 HIGH

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/video/list.

CVE-2022-38282

2022-09-13

N/A

7.2 HIGH

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/videoalbum/list.

CVE-2022-38281

2022-09-13

N/A

7.2 HIGH

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/site/list.

CVE-2022-38280

2022-09-13

N/A

7.2 HIGH

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/image/list.

CVE-2022-3828

2022-11-30

N/A

4.8 MEDIUM

The Video Thumbnails WordPress plugin through 2.12.3 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).

CVE-2022-38279

2022-09-13

N/A

7.2 HIGH

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/imagealbum/list.

CVE-2022-38278

2022-09-13

N/A

7.2 HIGH

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/friendlylink/list.

CVE-2022-38277

2022-09-13