jrecms records

4 published records for vendor jrecms.

Researcher profile

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2023-43192No exploit	SQL injection can exist in a newly created part of the SpringbootCMS 1.0 background, and the parameters submitted by users are not filtered.jrecms · springbootcms · CWE-89 SQL injection	High8.8	—	0.8%	Sep 27, 2023
28Monitor	CVE-2022-4282No exploit	SpringBootCMS Template Management injectionjrecms · springbootcms · CWE-707	High7.2	—	0.7%	Dec 5, 2022
21Monitor	CVE-2023-43191No exploit	SpringbootCMS 1.0 foreground message can be embedded malicious code saved in the database.jrecms · springbootcms · CWE-79 XSS	Medium5.4	—	0.4%	Sep 27, 2023
21Monitor	CVE-2024-6539No exploit	heyewei SpringBootCMS Guestbook guestbook cross site scriptingjrecms · springbootcms · CWE-79 XSS	Medium5.3	—	0.3%	Jul 7, 2024

CVE-2023-43192
35Monitor
SQL injection can exist in a newly created part of the SpringbootCMS 1.0 background, and the parameters submitted by users are not filtered.
HighCVSS 8.8No exploitEPSS 0%
- SQL injection
jrecms · springbootcmsSep 27, 2023
CVE-2022-4282
28Monitor
SpringBootCMS Template Management injection
HighCVSS 7.2No exploitEPSS 0%
jrecms · springbootcmsDec 5, 2022
CVE-2023-43191
21Monitor
SpringbootCMS 1.0 foreground message can be embedded malicious code saved in the database.
MediumCVSS 5.4No exploitEPSS 0%
- XSS
jrecms · springbootcmsSep 27, 2023
CVE-2024-6539
21Monitor
heyewei SpringBootCMS Guestbook guestbook cross site scripting
MediumCVSS 5.3No exploitEPSS 0%
- XSS
jrecms · springbootcmsJul 7, 2024