Skip to content
Noroxi

jeecms records

6 published records for vendor jeecms.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 21

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

6 records
  • CVE-2018-19545
    35Monitor

    JEECMS 9.3 has CSRF via the api/admin/role/save URI to add a user.

    HighCVSS 8.8No exploitEPSS 0%

    jeecms · jeecmsNov 26, 2018

  • CVE-2018-20528
    26Monitor

    JEECMS 9 has SSRF via the ueditor/getRemoteImage.jspx upfile parameter.

    MediumCVSS 6.5No exploitEPSS 1%

    jeecms · jeecmsDec 28, 2018

  • CVE-2018-19544
    26Monitor

    JEECMS 9.3 has CSRF via the api/admin/content/save URI to add news.

    MediumCVSS 6.5No exploitEPSS 0%

    jeecms · jeecmsNov 26, 2018

  • CVE-2020-21729
    21Monitor

    JEECMS x1.1 contains a stored cross-site scripting (XSS) vulnerability in the component of /member-vipcenter.htm, which allows attackers to

    MediumCVSS 5.4No exploitEPSS 0%

    jeecms · jeecms xOct 7, 2021

  • CVE-2020-20799
    21Monitor

    JeeCMS 1.0.1 contains a stored cross-site scripting (XSS) vulnerability which allows attackers to execute arbitrary web scripts or HTML via

    MediumCVSS 5.4No exploitEPSS 0%

    jeecms · jeecmsSep 30, 2021

  • CVE-2018-18952
    19Monitor

    JEECMS 9.3 has XSS via an index.do#/content/update?type=update URI.

    MediumCVSS 4.8No exploitEPSS 0%

    jeecms · jeecmsNov 5, 2018