jeesns jeesns 1.4.2 vulnerabilities and exploits

(subscribe to this query)

6.8

CVSSv2

Jeesns 1.4.2 contains a cross-site request forgery (CSRF) which allows malicious users to escalate privileges and perform sensitive program operations.

Jeesns Jeesns 1.4.2

3.5

CVSSv2

A stored cross-site scripting (XSS) vulnerability in the /manage/loginusername component of Jeesns 1.4.2 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload in the username field.

Jeesns Jeesns 1.4.2

4.3

CVSSv2

A reflected cross-site scripting (XSS) vulnerability in Jeesns 1.4.2 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload in the system error message's text field.

Jeesns Jeesns 1.4.2

4.3

CVSSv2

A reflected cross-site scripting (XSS) vulnerability in the /newVersion component of Jeesns 1.4.2 allows malicious users to execute arbitrary web scripts or HTML.

Jeesns Jeesns 1.4.2

3.5

CVSSv2

A stored cross-site scripting (XSS) vulnerability in the /group/comment component of Jeesns 1.4.2 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload in the group comments text field.

Jeesns Jeesns 1.4.2

3.5

CVSSv2

A stored cross-site scripting (XSS) vulnerability in the /group/apply component of Jeesns 1.4.2 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload in the Name text field.

Jeesns Jeesns 1.4.2

3.5

CVSSv2

A stored cross-site scripting (XSS) vulnerability in the /question/detail component of Jeesns 1.4.2 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload in the source field of the editor.

Jeesns Jeesns 1.4.2

3.5

CVSSv2

A stored cross-site scripting (XSS) vulnerability in the /group/post component of Jeesns 1.4.2 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload in the title.

Jeesns Jeesns 1.4.2

3.5

CVSSv2

A stored cross-site scripting (XSS) vulnerability in the /localhost/u component of Jeesns 1.4.2 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload in a private message.

Jeesns Jeesns 1.4.2

3.5

CVSSv2

A stored cross-site scripting (XSS) vulnerability in the /member/picture/album component of Jeesns 1.4.2 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload in the new album tab.

Jeesns Jeesns 1.4.2

Get Started

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook