Vendor
Jeecms
Products
1
CVEs
6
Across products
6
Status
Private
Products
1- 6 CVEs
Recent CVEs
6| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2018-19545 | Hig | 0.57 | 8.8 | 0.00 | Nov 26, 2018 | JEECMS 9.3 has CSRF via the api/admin/role/save URI to add a user. | ||
| CVE-2018-20528 | Med | 0.42 | 6.5 | 0.01 | Dec 28, 2018 | JEECMS 9 has SSRF via the ueditor/getRemoteImage.jspx upfile parameter. | ||
| CVE-2018-19544 | Med | 0.42 | 6.5 | 0.00 | Nov 26, 2018 | JEECMS 9.3 has CSRF via the api/admin/content/save URI to add news. | ||
| CVE-2020-21729 | Med | 0.35 | 5.4 | 0.01 | Oct 7, 2021 | JEECMS x1.1 contains a stored cross-site scripting (XSS) vulnerability in the component of /member-vipcenter.htm, which allows attackers to execute arbitrary web scripts or HTML via a crafted payload. | ||
| CVE-2020-20799 | Med | 0.35 | 5.4 | 0.00 | Sep 30, 2021 | JeeCMS 1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the commentText parameter. | ||
| CVE-2018-18952 | Med | 0.31 | 4.8 | 0.01 | Nov 5, 2018 | JEECMS 9.3 has XSS via an index.do#/content/update?type=update URI. |
- risk 0.57cvss 8.8epss 0.00
JEECMS 9.3 has CSRF via the api/admin/role/save URI to add a user.
- risk 0.42cvss 6.5epss 0.01
JEECMS 9 has SSRF via the ueditor/getRemoteImage.jspx upfile parameter.
- risk 0.42cvss 6.5epss 0.00
JEECMS 9.3 has CSRF via the api/admin/content/save URI to add news.
- risk 0.35cvss 5.4epss 0.01
JEECMS x1.1 contains a stored cross-site scripting (XSS) vulnerability in the component of /member-vipcenter.htm, which allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
- risk 0.35cvss 5.4epss 0.00
JeeCMS 1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the commentText parameter.
- risk 0.31cvss 4.8epss 0.01
JEECMS 9.3 has XSS via an index.do#/content/update?type=update URI.