PatchTheCVEj2store vulnerabilities and fixes
Recent CVEs affecting j2store, with upgrade or downgrade steps. 1 tracked.
j2store has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2020-06-09. Highest priority: CVE-2020-13996 (score 49/100).
- CVE-2020-13996 HIGH 8.8 UPGRADE The J2Store plugin before 3.3.13 for Joomla! allows a SQL injection attack by a trusted store manager.
FAQ
How do I fix j2store vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is j2store being exploited right now?
None of the tracked j2store CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which j2store CVE should I patch first?
CVE-2020-13996 currently ranks highest (49/100): The J2Store plugin before 3.3.13 for Joomla! allows a SQL injection attack by a trusted store manager..