jflyfox JFinalCMS 5.1.0 Remote RCE via login.jsp
CVE-2023-47503 Published on November 28, 2023

An issue in jflyfox jfinalCMS v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the login.jsp component in the template management module.

NVD


Products Associated with CVE-2023-47503

Want to know whenever a new CVE is published for Jflyfox Jfinal Cms? stack.watch will email you.

Jflyfox Jfinal Cms
 

Exploit Probability

EPSS
1.29%
Percentile
79.98%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.