Joyplus Project Joyplus — known CVE vulnerabilities

Every CVE whose affected-product data names Joyplus Project Joyplus, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2019-16656 — CVSS 9.8 (critical): joyplus-cms 1.6.0 allows remote attackers to execute arbitrary PHP code via /install by placing the code in the name of an object in the…
• CVE-2019-16660 — CVSS 8.8 (high): joyplus-cms 1.6.0 has admin_ajax.php?action=savexml&tab=vodplay CSRF.
• CVE-2019-16655 — CVSS 7.5 (high): joyplus-cms 1.6.0 allows reinstallation if the install/ URI remains available.