com.jflyfox:jflyfox_jfinal@4.5.0 vulnerabilities

4.5.0

8 years ago

7 years ago

Direct Vulnerabilities

Known vulnerabilities in the com.jflyfox:jflyfox_jfinal package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability	Vulnerable Version
M Cross-site Scripting (XSS) Affected versions of this package are vulnerable to Cross-site Scripting (XSS) due to improper input validation. Exploiting this vulnerability is possible via a crafted payload injected into the post title text field under the publish blog module. How to fix Cross-site Scripting (XSS)? There is no fixed version for `com.jflyfox:jflyfox_jfinal`.	[0,)
M Cross-site Scripting (XSS) Affected versions of this package are vulnerable to Cross-site Scripting (XSS) in the guest `TOP10` which will display the `ip` of the user, but it can be modified by `X-Forwarded-For`. How to fix Cross-site Scripting (XSS)? There is no fixed version for `com.jflyfox:jflyfox_jfinal`.	[0,)