Jellycms — known CVE vulnerabilities

Every CVE whose affected-product data names Jellycms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (1)

• CVE-2022-26630 — CVSS 8.8 (high): Jellycms v3.8.1 and below was discovered to contain an arbitrary file upload vulnerability via \app.\admin\Controllers\db.php.