VULNERABILITY INTELLIGENCE

CVE-2022-38277

CVSS score7.2 HIGH

EPSS probability1.05%

CISA KEVNot currently listed

Published2022-09-09

Last modified2026-06-17

Description

JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/folderrollpicture/list.