Jce-tech

Records11All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high3CVSS 7.0–8.9

Exploited now

Jce-tech records in CISA KEV

No Jce-tech vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Php Calendars Script 4 records LOW Affiliate Master Datafeed Parser 1 record LOW Auction Rss Content Script 1 record LOW Overstock Script 1 record LOW Php Video Script 1 record LOW Searchfeed Script 1 record LOW Shareasale Script 1 record LOW Video Niche Script 1 record LOW

Records

1 record in Auction Rss Content Script · all components

TI-2009-03040 CVE-2009-3195 · GHSA-vp78-g43w-3482

Multiple cross-site scripting (XSS) vulnerabilities in JCE-Tech Auction RSS Content…

LOW 23

Multiple cross-site scripting (XSS) vulnerabilities in JCE-Tech Auction RSS Content Script 3.0 allow remote attackers to inject arbitrary web script or HTML via the id parameter to (1) rss.php and (2) search.php.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01525 Published 2009-09-15 No fix listed CWE-79

Open these records in search →

Critical	0
High	3
Medium	8
Low	0
No CVSS	0