VULNERABILITY INTELLIGENCE

CVE-2023-49396

CVSS score8.8 HIGH

EPSS probability0.39%

CISA KEVNot currently listed

Published2023-12-05

Last modified2026-06-17

Description

JFinalCMS v5.0.0 was discovered to contain a Cross-Site Request Forgery (CSRF) vulnerability via /admin/category/save.