CVE-2019-17489: Jnoj Jiangnan Online Judge

Medium severity, CVSS 6.1. EPSS: 1.1% chance of exploitation in the next 30 days.

Jiangnan Online Judge (aka jnoj) 0.8.0 has XSS via the Problem[title] parameter to web/polygon/problem/create or web/polygon/problem/update or web/admin/problem/create.

Affected products

  • Jnoj Jiangnan Online Judge: version 0.8.0 only

Published 2019-10-10. Last modified 2026-06-17.