Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
jeesns vulnerabilities and exploits
(subscribe to this query)
3.5
CVSSv2
CVE-2018-12429
JEESNS up to and including 1.2.1 allows XSS attacks by ordinary users who publish articles containing a crafted payload in order to capture an administrator cookie.
Jeesns Jeesns
6.8
CVSSv2
CVE-2020-19280
Jeesns 1.4.2 contains a cross-site request forgery (CSRF) which allows malicious users to escalate privileges and perform sensitive program operations.
Jeesns Jeesns 1.4.2
3.5
CVSSv2
CVE-2020-19281
A stored cross-site scripting (XSS) vulnerability in the /manage/loginusername component of Jeesns 1.4.2 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload in the username field.
Jeesns Jeesns 1.4.2
4.3
CVSSv2
CVE-2020-19282
A reflected cross-site scripting (XSS) vulnerability in Jeesns 1.4.2 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload in the system error message's text field.
Jeesns Jeesns 1.4.2
4.3
CVSSv2
CVE-2020-19283
A reflected cross-site scripting (XSS) vulnerability in the /newVersion component of Jeesns 1.4.2 allows malicious users to execute arbitrary web scripts or HTML.
Jeesns Jeesns 1.4.2
3.5
CVSSv2
CVE-2020-19284
A stored cross-site scripting (XSS) vulnerability in the /group/comment component of Jeesns 1.4.2 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload in the group comments text field.
Jeesns Jeesns 1.4.2
3.5
CVSSv2
CVE-2020-19285
A stored cross-site scripting (XSS) vulnerability in the /group/apply component of Jeesns 1.4.2 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload in the Name text field.
Jeesns Jeesns 1.4.2
3.5
CVSSv2
CVE-2020-19286
A stored cross-site scripting (XSS) vulnerability in the /question/detail component of Jeesns 1.4.2 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload in the source field of the editor.
Jeesns Jeesns 1.4.2
3.5
CVSSv2
CVE-2020-19287
A stored cross-site scripting (XSS) vulnerability in the /group/post component of Jeesns 1.4.2 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload in the title.
Jeesns Jeesns 1.4.2
3.5
CVSSv2
CVE-2020-19288
A stored cross-site scripting (XSS) vulnerability in the /localhost/u component of Jeesns 1.4.2 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload in a private message.
Jeesns Jeesns 1.4.2
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-3675
CVE-2024-3400
CVE-2024-23557
mass assignment
CVE-2023-1389
local file inclusion
CVE-2024-32596
file upload
CVE-2024-32593
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
NEXT »