PatchTheCVEjellycms vulnerabilities and fixes
Recent CVEs affecting jellycms, with upgrade or downgrade steps. 1 tracked.
jellycms has 1 tracked vulnerability, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2022-04-05. Highest priority: CVE-2022-26630 (score 51/100).
- CVE-2022-26630 HIGH 8.8 UPGRADE Jellycms v3.8.1 and below was discovered to contain an arbitrary file upload vulnerability via \app.\admin\Con
FAQ
How do I fix jellycms vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is jellycms being exploited right now?
None of the tracked jellycms CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which jellycms CVE should I patch first?
CVE-2022-26630 currently ranks highest (51/100): Jellycms v3.8.1 and below was discovered to contain an arbitrary file upload vulnerability via \app.\admin\Con.