An issue in jflyfox jfinalCMS v.5.1.0 allows a remote attacker to execute arbitrary code via a crafted script to the login.jsp component in the template management module.
- https://github.com/jflyfox/jfinal_cms/issues/58
No PoCs found on GitHub currently.