A vulnerability was found in JFinalCMS up to 20240111. It has been rated as problematic. This issue affects some unknown processing of the file /admin/template. The manipulation of the argument directory leads to cross site scripting.

The identification of this vulnerability is CVE-2024-5379. The attack may be initiated remotely. Furthermore, there is an exploit available.