jeesns

CVEs (5)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2020-19295	Jeesns Jeesns	Med	0.40	6.1	0.04	Sep 9, 2021	A reflected cross-site scripting (XSS) vulnerability in the /weibo/topic component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML.
CVE-2020-19283	Zchuanzhao jeesns	Med	0.40	6.1	0.03	Sep 9, 2021	A reflected cross-site scripting (XSS) vulnerability in the /newVersion component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML.
CVE-2020-19293	Jeesns Jeesns	Med	0.35	5.4	0.01	Sep 9, 2021	A stored cross-site scripting (XSS) vulnerability in the /article/add component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in a posted article.
CVE-2020-19287	Jeesns Jeesns	Med	0.35	5.4	0.01	Sep 9, 2021	A stored cross-site scripting (XSS) vulnerability in the /group/post component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the title.
CVE-2020-19285	Jeesns Jeesns	Med	0.35	5.4	0.01	Sep 9, 2021	A stored cross-site scripting (XSS) vulnerability in the /group/apply component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Name text field.

CVE-2020-19295MedSep 9, 2021
Jeesns
Jeesns
risk 0.40cvss 6.1epss 0.04
A reflected cross-site scripting (XSS) vulnerability in the /weibo/topic component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML.
CVE-2020-19283MedSep 9, 2021
Zchuanzhao
jeesns
risk 0.40cvss 6.1epss 0.03
A reflected cross-site scripting (XSS) vulnerability in the /newVersion component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML.
CVE-2020-19293MedSep 9, 2021
Jeesns
Jeesns
risk 0.35cvss 5.4epss 0.01
A stored cross-site scripting (XSS) vulnerability in the /article/add component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in a posted article.
CVE-2020-19287MedSep 9, 2021
Jeesns
Jeesns
risk 0.35cvss 5.4epss 0.01
A stored cross-site scripting (XSS) vulnerability in the /group/post component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the title.
CVE-2020-19285MedSep 9, 2021
Jeesns
Jeesns
risk 0.35cvss 5.4epss 0.01
A stored cross-site scripting (XSS) vulnerability in the /group/apply component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Name text field.