TI-2018-13843 CVE-2018-19545 · GHSA-cp47-g8rf-6xj7
JEECMS 9.3 has CSRF via the api/admin/role/save URI to add a user.
Priority LOW 39
JEECMS 9.3 has CSRF via the api/admin/role/save URI to add a user.
Jeecms
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
Jeecms records in CISA KEVNo Jeecms vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records
TI-2018-14555 CVE-2018-20528 · GHSA-7g25-wrwr-v7hm
JEECMS 9 has SSRF via the ueditor/getRemoteImage.jspx upfile parameter.
Priority LOW 31
JEECMS 9 has SSRF via the ueditor/getRemoteImage.jspx upfile parameter.
TI-2018-13842 CVE-2018-19544 · GHSA-mjgh-6cg9-7rxw
JEECMS 9.3 has CSRF via the api/admin/content/save URI to add news.
Priority LOW 29
JEECMS 9.3 has CSRF via the api/admin/content/save URI to add news.
TI-2020-14157 CVE-2020-21729 · GHSA-xj3p-jj6q-38cj
JEECMS x1.1 contains a stored cross-site scripting (XSS) vulnerability in the component…
Priority LOW 25
JEECMS x1.1 contains a stored cross-site scripting (XSS) vulnerability in the component of /member-vipcenter.htm, which allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
TI-2020-13930 CVE-2020-20799 · GHSA-7grc-h894-wvp2
JeeCMS 1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows…
Priority LOW 25
JeeCMS 1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the commentText parameter.
TI-2018-13427 CVE-2018-18952 · GHSA-j433-xfvg-4237
JEECMS 9.3 has XSS via an index.do#/content/update?type=update URI.
Priority LOW 23
JEECMS 9.3 has XSS via an index.do#/content/update?type=update URI.