https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2024-1264.htmlhttps://patchthecve.com/cve/CVE-2024-1264.htmlWed, 17 Jun 2026 07:03:50 +0000MEDIUM 6.3: A vulnerability has been found in Juanpao JPShop up to 1.5.02 and classified as critical. Affected by this vulnerability is the function actionUpdate of the file /api/controllers/common/UploadsController.php. The manipulation of the argument imgage leads to unrestricted upload. The attack can be lauhttps://patchthecve.com/cve/CVE-2024-1263.htmlhttps://patchthecve.com/cve/CVE-2024-1263.htmlWed, 17 Jun 2026 07:03:50 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, was found in Juanpao JPShop up to 1.5.02. Affected is the function actionUpdate of the file /api/controllers/merchant/shop/PosterController.php of the component API. The manipulation of the argument pic_url leads to unrestricted upload. It is possibhttps://patchthecve.com/cve/CVE-2024-1262.htmlhttps://patchthecve.com/cve/CVE-2024-1262.htmlWed, 17 Jun 2026 07:03:50 +0000MEDIUM 6.3: A vulnerability, which was classified as critical, has been found in Juanpao JPShop up to 1.5.02. This issue affects the function actionUpdate of the file /api/controllers/merchant/design/MaterialController.php of the component API. The manipulation of the argument pic_url leads to unrestricted uplohttps://patchthecve.com/cve/CVE-2024-1261.htmlhttps://patchthecve.com/cve/CVE-2024-1261.htmlWed, 17 Jun 2026 07:03:50 +0000MEDIUM 6.3: A vulnerability classified as critical was found in Juanpao JPShop up to 1.5.02. This vulnerability affects the function actionIndex of the file /api/controllers/merchant/app/ComboController.php of the component API. The manipulation of the argument pic_url leads to unrestricted upload. The attack chttps://patchthecve.com/cve/CVE-2024-1260.htmlhttps://patchthecve.com/cve/CVE-2024-1260.htmlWed, 17 Jun 2026 07:03:50 +0000MEDIUM 6.3: A vulnerability classified as critical has been found in Juanpao JPShop up to 1.5.02. This affects the function actionIndex of the file /api/controllers/admin/app/ComboController.php of the component API. The manipulation of the argument pic_url leads to unrestricted upload. It is possible to initiahttps://patchthecve.com/cve/CVE-2024-1259.htmlhttps://patchthecve.com/cve/CVE-2024-1259.htmlWed, 17 Jun 2026 07:03:50 +0000MEDIUM 6.3: A vulnerability was found in Juanpao JPShop up to 1.5.02. It has been rated as critical. Affected by this issue is some unknown functionality of the file /api/controllers/admin/app/AppController.php of the component API. The manipulation of the argument app_pic_url leads to unrestricted upload. The https://patchthecve.com/cve/CVE-2024-1258.htmlhttps://patchthecve.com/cve/CVE-2024-1258.htmlWed, 17 Jun 2026 07:03:50 +0000LOW 3.1: A vulnerability was found in Juanpao JPShop up to 1.5.02. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file api/config/params.php of the component API. The manipulation of the argument JWT_KEY_ADMIN leads to use of hard-coded cryptographic ke