Jspxcms — known CVE vulnerabilities

Every CVE whose affected-product data names Jspxcms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2018-20596 — CVSS 9.8 (critical): Jspxcms v9.0.0 allows SSRF.
• CVE-2018-16553 — CVSS 7.2 (high): In Jspxcms 9.0.0, a vulnerable URL routing implementation allows remote code execution after logging in as web admin.
• CVE-2023-46911 — CVSS 6.1 (medium): There is a Cross Site Scripting (XSS) vulnerability in the choose_style_tree.do interface of Jspxcms v10.2.0 backend.
• CVE-2024-1200 — CVSS 5.3 (medium): A vulnerability was found in Jspxcms 10.2.0 and classified as problematic. Affected by this issue is some unknown functionality of the file…
• CVE-2024-0721 — CVSS 3.5 (low): A vulnerability has been found in Jspxcms 10.2.0 and classified as problematic. Affected by this vulnerability is an unknown functionality…