Cross Site Scripting (XSS) in Jeesns v1.4.2 allows remote attackers to execute arbitrary code by injecting commands into the \CKEditorFuncNum\ parameter in the component \CkeditorUploadController.java\.