Jellycms

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Jellycms records in CISA KEV

No Jellycms vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Jellycms · all components

TI-2022-09907 CVE-2022-26630 · GHSA-v856-qf8f-mpx8

MEDIUM 40

Jellycms v3.8.1 and below was discovered to contain an arbitrary file upload vulnerability via \app.\admin\Controllers\db.php.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00957 Published 2022-04-05 No fix listed CWE-434