PatchTheCVEjeesns vulnerabilities
Recent CVEs affecting jeesns products. 18 tracked.
jeesns has 18 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-09-19. Highest priority: CVE-2020-19280 (score 51/100).
- CVE-2022-38550 MEDIUM 5.4 DOWNGRADE A stored cross-site scripting (XSS) vulnerability in the /weibo/list component of Jeesns v2.0.0 allows attacke
- CVE-2020-19295 MEDIUM 6.1 DOWNGRADE A reflected cross-site scripting (XSS) vulnerability in the /weibo/topic component of Jeesns 1.4.2 allows atta
- CVE-2020-19294 MEDIUM 5.4 DOWNGRADE A stored cross-site scripting (XSS) vulnerability in the /article/comment component of Jeesns 1.4.2 allows att
- CVE-2020-19293 MEDIUM 5.4 DOWNGRADE A stored cross-site scripting (XSS) vulnerability in the /article/add component of Jeesns 1.4.2 allows attacke
- CVE-2020-19292 MEDIUM 5.4 DOWNGRADE A stored cross-site scripting (XSS) vulnerability in the /question/ask component of Jeesns 1.4.2 allows attack
- CVE-2020-19291 MEDIUM 5.4 DOWNGRADE A stored cross-site scripting (XSS) vulnerability in the /weibo/publishdata component of Jeesns 1.4.2 allows a
- CVE-2020-19290 MEDIUM 5.4 DOWNGRADE A stored cross-site scripting (XSS) vulnerability in the /weibo/comment component of Jeesns 1.4.2 allows attac
- CVE-2020-19289 MEDIUM 5.4 DOWNGRADE A stored cross-site scripting (XSS) vulnerability in the /member/picture/album component of Jeesns 1.4.2 allow
- CVE-2020-19288 MEDIUM 5.4 DOWNGRADE A stored cross-site scripting (XSS) vulnerability in the /localhost/u component of Jeesns 1.4.2 allows attacke
- CVE-2020-19287 MEDIUM 5.4 DOWNGRADE A stored cross-site scripting (XSS) vulnerability in the /group/post component of Jeesns 1.4.2 allows attacker
- CVE-2020-19286 MEDIUM 5.4 DOWNGRADE A stored cross-site scripting (XSS) vulnerability in the /question/detail component of Jeesns 1.4.2 allows att
- CVE-2020-19285 MEDIUM 5.4 DOWNGRADE A stored cross-site scripting (XSS) vulnerability in the /group/apply component of Jeesns 1.4.2 allows attacke
- CVE-2020-19284 MEDIUM 5.4 DOWNGRADE A stored cross-site scripting (XSS) vulnerability in the /group/comment component of Jeesns 1.4.2 allows attac
- CVE-2020-19283 MEDIUM 6.1 DOWNGRADE A reflected cross-site scripting (XSS) vulnerability in the /newVersion component of Jeesns 1.4.2 allows attac
- CVE-2020-19282 MEDIUM 6.1 DOWNGRADE A reflected cross-site scripting (XSS) vulnerability in Jeesns 1.4.2 allows attackers to execute arbitrary web
- CVE-2020-19281 MEDIUM 5.4 DOWNGRADE A stored cross-site scripting (XSS) vulnerability in the /manage/loginusername component of Jeesns 1.4.2 allow
- CVE-2020-19280 HIGH 8.8 DOWNGRADE Jeesns 1.4.2 contains a cross-site request forgery (CSRF) which allows attackers to escalate privileges and pe
- CVE-2020-18035 MEDIUM 6.1 DOWNGRADE Cross Site Scripting (XSS) in Jeesns v1.4.2 allows remote attackers to execute arbitrary code by injecting com
FAQ
How do I fix jeesns vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is jeesns being exploited right now?
None of the tracked jeesns CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which jeesns CVE should I patch first?
CVE-2020-19280 currently ranks highest (51/100): Jeesns 1.4.2 contains a cross-site request forgery (CSRF) which allows attackers to escalate privileges and pe.