Jojocms

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Jojocms records in CISA KEV

No Jojocms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Jojo-cms 2 records LOW

Records

2 records

TI-2013-02691 CVE-2013-3081 · GHSA-ph5w-64g2-6mh3

SQL injection vulnerability in the checkEmailFormat function in…

LOW 37

SQL injection vulnerability in the checkEmailFormat function in plugins/jojo_core/classes/Jojo.php in Jojo before 1.2.2 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For HTTP header to /ar…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02359 Published 2014-06-09 No fix listed CWE-89

TI-2013-02692 CVE-2013-3082 · GHSA-mwx5-qrmr-p39h

Cross-site scripting (XSS) vulnerability in plugins/jojo_core/forgot_password.php in Jojo…

LOW 26

Cross-site scripting (XSS) vulnerability in plugins/jojo_core/forgot_password.php in Jojo before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the search parameter to forgot-password/.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.03233 Published 2014-06-09 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	1
Low	0
No CVSS	0