Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
jeesns jeesns vulnerabilities and exploits
(subscribe to this query)
5.4
CVSSv3
CVE-2020-19291
A stored cross-site scripting (XSS) vulnerability in the /weibo/publishdata component of Jeesns 1.4.2 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload in a posted Weibo.
Jeesns Jeesns 1.4.2
5.4
CVSSv3
CVE-2020-19292
A stored cross-site scripting (XSS) vulnerability in the /question/ask component of Jeesns 1.4.2 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload in a posted question.
Jeesns Jeesns 1.4.2
5.4
CVSSv3
CVE-2020-19293
A stored cross-site scripting (XSS) vulnerability in the /article/add component of Jeesns 1.4.2 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload in a posted article.
Jeesns Jeesns 1.4.2
5.4
CVSSv3
CVE-2020-19294
A stored cross-site scripting (XSS) vulnerability in the /article/comment component of Jeesns 1.4.2 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload in the article comments section.
Jeesns Jeesns 1.4.2
6.1
CVSSv3
CVE-2020-18035
Cross Site Scripting (XSS) in Jeesns v1.4.2 allows remote malicious users to execute arbitrary code by injecting commands into the "CKEditorFuncNum" parameter in the component "CkeditorUploadController.java".
Jeesns Jeesns 1.4.2
5.4
CVSSv3
CVE-2018-17886
An issue exists in JEESNS 1.3. The XSS filter in com.lxinet.jeesns.core.utils.XssHttpServletRequestWrapper.java could be bypassed, as demonstrated by a <svg/onLoad=confirm substring. NOTE: this vulnerability exists because of an incomplete fix for CVE-2018-12429.
Jeesns Jeesns 1.3
5.4
CVSSv3
CVE-2020-19281
A stored cross-site scripting (XSS) vulnerability in the /manage/loginusername component of Jeesns 1.4.2 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload in the username field.
Jeesns Jeesns 1.4.2
5.4
CVSSv3
CVE-2020-19285
A stored cross-site scripting (XSS) vulnerability in the /group/apply component of Jeesns 1.4.2 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload in the Name text field.
Jeesns Jeesns 1.4.2
5.4
CVSSv3
CVE-2020-19287
A stored cross-site scripting (XSS) vulnerability in the /group/post component of Jeesns 1.4.2 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload in the title.
Jeesns Jeesns 1.4.2
5.4
CVSSv3
CVE-2020-19289
A stored cross-site scripting (XSS) vulnerability in the /member/picture/album component of Jeesns 1.4.2 allows malicious users to execute arbitrary web scripts or HTML via a crafted payload in the new album tab.
Jeesns Jeesns 1.4.2
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
man-in-the-middle
command injection
CVE-2021-47511
CVE-2024-26238
CVE-2024-4858
CVE-2024-21305
XXE
CVE-2021-47555
CVE-2021-47526
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
NEXT »