Medium severity6.3NVD Advisory· Published Feb 6, 2024· Updated Jun 17, 2026
CVE-2024-1261
CVE-2024-1261
Description
A vulnerability classified as critical was found in Juanpao JPShop up to 1.5.02. This vulnerability affects the function actionIndex of the file /api/controllers/merchant/app/ComboController.php of the component API. The manipulation of the argument pic_url leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-253000.
Affected products
2Patches
Vulnerability mechanics
References
3- vuldb.comnvdPermissions RequiredThird Party Advisory
- vuldb.comnvdThird Party Advisory
- note.zhaoj.in/share/v2JpHJngvw7EnvdBroken Link
News mentions
0No linked articles in our index yet.