Jmash

2 CVEs in 1 Jmash product, including Postmash. Newest: CVE-2024-27196 (2024-03-15). Severity, EPSS and public exploits for each.

Jmash products with known CVEs

ProductCVEs
Postmash2
Jmash CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2024-27196High7.12024-03-15Cross Site Scripting (XSS) vulnerability in Joel Starnes postMash – custom post order allows Reflected XSS.This issue affects postMash – custom post order: fro…
CVE-2024-25927Critical9.32024-02-28Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') vulnerability in Joel Starnes postMash – custom post order.This issue affe…