Jeesns

Jeesns

21 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
5.4

CVE-2022-38550

Exploit
  • EPSS 0.2%
  • Veröffentlicht 19.09.2022 23:15:09
  • Zuletzt bearbeitet 27.05.2025 18:15:29

A stored cross-site scripting (XSS) vulnerability in the /weibo/list component of Jeesns v2.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

6.1

CVE-2020-19295

Exploit
  • EPSS 13.64%
  • Veröffentlicht 09.09.2021 23:15:10
  • Zuletzt bearbeitet 21.11.2024 05:09:07

A reflected cross-site scripting (XSS) vulnerability in the /weibo/topic component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML.

5.4

CVE-2020-19294

Exploit
  • EPSS 0.19%
  • Veröffentlicht 09.09.2021 23:15:10
  • Zuletzt bearbeitet 21.11.2024 05:09:07

A stored cross-site scripting (XSS) vulnerability in the /article/comment component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the article comments section.

5.4

CVE-2020-19286

Exploit
  • EPSS 0.19%
  • Veröffentlicht 09.09.2021 23:15:09
  • Zuletzt bearbeitet 21.11.2024 05:09:05

A stored cross-site scripting (XSS) vulnerability in the /question/detail component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the source field of the editor.

5.4

CVE-2020-19293

Exploit
  • EPSS 0.19%
  • Veröffentlicht 09.09.2021 23:15:09
  • Zuletzt bearbeitet 21.11.2024 05:09:06

A stored cross-site scripting (XSS) vulnerability in the /article/add component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in a posted article.

5.4

CVE-2020-19292

Exploit
  • EPSS 0.19%
  • Veröffentlicht 09.09.2021 23:15:09
  • Zuletzt bearbeitet 21.11.2024 05:09:06

A stored cross-site scripting (XSS) vulnerability in the /question/ask component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in a posted question.

5.4

CVE-2020-19291

Exploit
  • EPSS 0.15%
  • Veröffentlicht 09.09.2021 23:15:09
  • Zuletzt bearbeitet 21.11.2024 05:09:06

A stored cross-site scripting (XSS) vulnerability in the /weibo/publishdata component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in a posted Weibo.

5.4

CVE-2020-19290

Exploit
  • EPSS 0.19%
  • Veröffentlicht 09.09.2021 23:15:09
  • Zuletzt bearbeitet 21.11.2024 05:09:06

A stored cross-site scripting (XSS) vulnerability in the /weibo/comment component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Weibo comment section.

5.4

CVE-2020-19289

Exploit
  • EPSS 0.26%
  • Veröffentlicht 09.09.2021 23:15:09
  • Zuletzt bearbeitet 21.11.2024 05:09:06

A stored cross-site scripting (XSS) vulnerability in the /member/picture/album component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the new album tab.

5.4

CVE-2020-19288

Exploit
  • EPSS 0.19%
  • Veröffentlicht 09.09.2021 23:15:09
  • Zuletzt bearbeitet 21.11.2024 05:09:06

A stored cross-site scripting (XSS) vulnerability in the /localhost/u component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in a private message.