Vulnerabilities

TI-2026-70878 CVE-2026-108799 · GHSA-prc4-c7gg-w62j

SQL injection in jackq XCMS password recovery mail endpoint

HIGH 70

A vulnerability was determined in jackq XCMS up to 3fab5342cc509945a7ce1b8ec39d19f701b89261.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00254 Published 2026-10-12 No fix listed CWE-74

TI-2025-13788 CVE-2025-15110 · GHSA-w2jm-qqhw-c9px

MEDIUM 56

A vulnerability has been found in jackq XCMS up to 3fab5342cc509945a7ce1b8ec39d19f701b89261.

CVSS 4.0MEDIUM 5.1 Network High privileges No interaction EPSS 0.00374 Published 2025-12-27 No fix listed CWE-284

TI-2025-13787 CVE-2025-15109 · GHSA-f342-w736-j52r

HIGH 70

A flaw has been found in jackq XCMS up to 3fab5342cc509945a7ce1b8ec39d19f701b89261.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00331 Published 2025-12-27 No fix listed CWE-284