Jalios Jcms
2 CVEs affecting Jalios Jcms. Latest disclosed: 2020-07-17. Critical: 1, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2019-19033 | Critical | 9.8 | 2019-11-21 | Jalios JCMS 10 allows attackers to access any part of the website and the WebDAV server with administrative privileges via a backdoor account, by using any use… |
CVE-2020-15497 | Medium | 5.3 | 2020-07-17 | jcore/portal/ajaxPortal.jsp in Jalios JCMS 10.0.2 build-20200224104759 allows XSS via the types parameter. Note: It is asserted that this vulnerability is not… |