Vulnerabilities

TI-2024-01115 CVE-2024-1200 · GHSA-4qjq-wqw7-p79p

Jspxcms information disclosure

HIGH 68

A vulnerability was found in Jspxcms 10.2.0 and classified as problematic.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00928 Published 2024-02-03 No fix listed CWE-200

TI-2024-00662 CVE-2024-0721 · GHSA-87vx-366j-j8w4

LOW 28

A vulnerability has been found in Jspxcms 10.2.0 and classified as problematic.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0046 Published 2024-01-19 No fix listed CWE-79

TI-2023-25330 CVE-2023-46911 · GHSA-v92j-4pq6-rqx3

LOW 28

There is a Cross Site Scripting (XSS) vulnerability in the choose_style_tree.do interface of Jspxcms v10.2.0 backend.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00446 Published 2023-11-01 No fix listed CWE-79

TI-2018-11873 CVE-2018-16553 · GHSA-h5p6-p2x9-xj23

LOW 36

In Jspxcms 9.0.0, a vulnerable URL routing implementation allows remote code execution after logging in as web admin.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.02536 Published 2019-06-20 No fix listed CWE-284

TI-2018-14617 CVE-2018-20596 · GHSA-pxp3-c847-mx5j

MEDIUM 44

Jspxcms v9.0.0 allows SSRF.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.01142 Published 2018-12-30 No fix listed CWE-918