Skip to content
Noroxi

jeesns records

21 published records for vendor jeesns.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
4
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 18
  2. 21
  3. 22

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

21 records
  • CVE-2020-19280
    35Monitor

    Jeesns 1.4.2 contains a cross-site request forgery (CSRF) which allows attackers to escalate privileges and perform sensitive program operat

    HighCVSS 8.8No exploitEPSS 0%

    jeesns · jeesnsSep 9, 2021

  • CVE-2020-19295
    25Monitor

    A reflected cross-site scripting (XSS) vulnerability in the /weibo/topic component of Jeesns 1.4.2 allows attackers to execute arbitrary web

    MediumCVSS 6.1Proof of conceptEPSS 3%

    jeesns · jeesnsSep 9, 2021

  • CVE-2020-19282
    25Monitor

    A reflected cross-site scripting (XSS) vulnerability in Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted

    MediumCVSS 6.1Proof of conceptEPSS 3%

    jeesns · jeesnsSep 9, 2021

  • CVE-2020-19283
    25Monitor

    A reflected cross-site scripting (XSS) vulnerability in the /newVersion component of Jeesns 1.4.2 allows attackers to execute arbitrary web

    MediumCVSS 6.1Proof of conceptEPSS 2%

    jeesns · jeesnsSep 9, 2021

  • CVE-2020-18035
    24Monitor

    Cross Site Scripting (XSS) in Jeesns v1.4.2 allows remote attackers to execute arbitrary code by injecting commands into the "CKEditorFuncNu

    MediumCVSS 6.1No exploitEPSS 1%

    jeesns · jeesnsApr 29, 2021

  • CVE-2020-19287
    21Monitor

    A stored cross-site scripting (XSS) vulnerability in the /group/post component of Jeesns 1.4.2 allows attackers to execute arbitrary web scr

    MediumCVSS 5.4No exploitEPSS 0%

    jeesns · jeesnsSep 9, 2021

  • CVE-2020-19291
    21Monitor

    A stored cross-site scripting (XSS) vulnerability in the /weibo/publishdata component of Jeesns 1.4.2 allows attackers to execute arbitrary

    MediumCVSS 5.4No exploitEPSS 0%

    jeesns · jeesnsSep 9, 2021

  • CVE-2018-17886
    21Monitor

    An issue was discovered in JEESNS 1.3.

    MediumCVSS 5.4No exploitEPSS 0%

    jeesns · jeesnsOct 2, 2018

  • CVE-2020-19285
    21Monitor

    A stored cross-site scripting (XSS) vulnerability in the /group/apply component of Jeesns 1.4.2 allows attackers to execute arbitrary web sc

    MediumCVSS 5.4No exploitEPSS 0%

    jeesns · jeesnsSep 9, 2021

  • CVE-2020-19289
    21Monitor

    A stored cross-site scripting (XSS) vulnerability in the /member/picture/album component of Jeesns 1.4.2 allows attackers to execute arbitra

    MediumCVSS 5.4No exploitEPSS 0%

    jeesns · jeesnsSep 9, 2021

  • CVE-2020-19292
    21Monitor

    A stored cross-site scripting (XSS) vulnerability in the /question/ask component of Jeesns 1.4.2 allows attackers to execute arbitrary web s

    MediumCVSS 5.4No exploitEPSS 0%

    jeesns · jeesnsSep 9, 2021

  • CVE-2020-19293
    21Monitor

    A stored cross-site scripting (XSS) vulnerability in the /article/add component of Jeesns 1.4.2 allows attackers to execute arbitrary web sc

    MediumCVSS 5.4No exploitEPSS 0%

    jeesns · jeesnsSep 9, 2021

  • CVE-2020-19286
    21Monitor

    A stored cross-site scripting (XSS) vulnerability in the /question/detail component of Jeesns 1.4.2 allows attackers to execute arbitrary we

    MediumCVSS 5.4No exploitEPSS 0%

    jeesns · jeesnsSep 9, 2021

  • CVE-2020-19281
    21Monitor

    A stored cross-site scripting (XSS) vulnerability in the /manage/loginusername component of Jeesns 1.4.2 allows attackers to execute arbitra

    MediumCVSS 5.4No exploitEPSS 0%

    jeesns · jeesnsSep 9, 2021

  • CVE-2018-19178
    21Monitor

    In JEESNS 1.3, com/lxinet/jeesns/core/utils/XssHttpServletRequestWrapper.java allows stored XSS via an HTML EMBED element, a different vulne

    MediumCVSS 5.4No exploitEPSS 0%

    jeesns · jeesnsNov 11, 2018

  • CVE-2020-19284
    21Monitor

    A stored cross-site scripting (XSS) vulnerability in the /group/comment component of Jeesns 1.4.2 allows attackers to execute arbitrary web

    MediumCVSS 5.4No exploitEPSS 0%

    jeesns · jeesnsSep 9, 2021

  • CVE-2020-19288
    21Monitor

    A stored cross-site scripting (XSS) vulnerability in the /localhost/u component of Jeesns 1.4.2 allows attackers to execute arbitrary web sc

    MediumCVSS 5.4No exploitEPSS 0%

    jeesns · jeesnsSep 9, 2021

  • CVE-2020-19294
    21Monitor

    A stored cross-site scripting (XSS) vulnerability in the /article/comment component of Jeesns 1.4.2 allows attackers to execute arbitrary we

    MediumCVSS 5.4No exploitEPSS 0%

    jeesns · jeesnsSep 9, 2021

  • CVE-2020-19290
    21Monitor

    A stored cross-site scripting (XSS) vulnerability in the /weibo/comment component of Jeesns 1.4.2 allows attackers to execute arbitrary web

    MediumCVSS 5.4No exploitEPSS 0%

    jeesns · jeesnsSep 9, 2021

  • CVE-2018-12429
    21Monitor

    JEESNS through 1.2.1 allows XSS attacks by ordinary users who publish articles containing a crafted payload in order to capture an administr

    MediumCVSS 5.4No exploitEPSS 0%

    jeesns · jeesnsJul 18, 2018

  • CVE-2022-38550
    21Monitor

    A stored cross-site scripting (XSS) vulnerability in the /weibo/list component of Jeesns v2.0.0 allows attackers to execute arbitrary web sc

    MediumCVSS 5.4No exploitEPSS 0%

    jeesns · jeesnsSep 19, 2022