juzaweb

Records16All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

juzaweb records in CISA KEV

No juzaweb vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Juzaweb Cms · all components

TI-2023-25020 CVE-2023-46468 · GHSA-h92m-4g9m-72vr

LOW 35

An issue in juzawebCMS v.3.4 and before allows a remote attacker to execute arbitrary code via a crafted file to the custom plugin function.

CVSS 3.1HIGH 7.8 Local No auth User interaction EPSS 0.00594 Published 2023-10-28 No fix listed CWE-74