CVE-2024-0599

A vulnerability was found in Jspxcms 10.2.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file src\main\java\com\jspxcms\core\web\back\InfoController.java of the component Document Management Page. The manipulation of the argument title leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-250837 was assigned to this vulnerability.

• CWE-79

• https://github.com/sweatxi/BugHub/blob/main/Jspxcms.pdfExploit
• https://vuldb.com/?ctiid.250837Third Party Advisory
• https://vuldb.com/?id.250837Third Party Advisory
• https://github.com/sweatxi/BugHub/blob/main/Jspxcms.pdfExploit
• https://vuldb.com/?ctiid.250837Third Party Advisory
• https://vuldb.com/?id.250837Third Party Advisory

Published

Jan 16, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-0593The Simple Job Board plugin for WordPress is vulnerable to u…5.3
• CVE-2024-0594The Awesome Support – WordPress HelpDesk & Support Plugin pl…8.8
• CVE-2024-0595The Awesome Support – WordPress HelpDesk & Support Plugin pl…4.3
• CVE-2024-0596The Awesome Support – WordPress HelpDesk & Support Plugin pl…5.3
• CVE-2024-0597The SEO Plugin by Squirrly SEO plugin for WordPress is vulne…4.8
• CVE-2024-0598The Gutenberg Blocks by Kadence Blocks – Page Builder Featur…4.8
• CVE-2024-0601A vulnerability was found in ZhongFuCheng3y Austin 1.0. It h…6.5
• CVE-2024-0602The YARPP – Yet Another Related Posts Plugin plugin for Word…4
• CVE-2024-0603A vulnerability classified as critical has been found in Zhi…9.8
• CVE-2024-0604The Best WordPress Gallery Plugin – FooGallery plugin for Wo…4.8
• CVE-2024-0605Using a javascript: URI with a setTimeout race condition, an…7.5
• CVE-2024-0606An attacker could execute unauthorized script on a legitimat…6.1