CVE-2020-19289

Jeesns 1.4.2 contains a stored XSS vulnerability in the /member/picture/album component, exploitable via a crafted payload in the New Album tab. Root cause is a failure to sanitize user input, enabling arbitrary web script/HTML execution. The connected sources consistently describe the same issue...

CVE-2020-19289

A stored cross-site scripting XSS vulnerability in the /member/picture/album component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the new album tab...

CVE-2020-19290

CVE-2020-19290 is a stored cross-site scripting (XSS) vulnerability in the Jeesns 1.4.2 application, specifically in the /weibo/comment component. The issue enables an attacker to inject and execute arbitrary web scripts or HTML via a crafted payload submitted in Weibo comments. Connected sources...

CVE-2020-19288

Jeesns 1.4.2 has a stored XSS in the /localhost/u component that allows attackers to inject and execute arbitrary scripts via a crafted payload in a private message. Public references confirm the vulnerability and its impact; no specific exploit details or remediation are provided in the connecte...

CVE-2020-19288

A stored cross-site scripting XSS vulnerability in the /localhost/u component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in a private message...

CVE-2020-19287

CVE-2020-19287 affects Jeesns 1.4.2 with a stored XSS vulnerability in the /group/post component. The issue leverages a crafted payload in the title to execute arbitrary web scripts/HTML, enabling potential credential/session/data exposure depending on context. Public records in multiple feeds (N...

CVE-2020-19287

A stored cross-site scripting XSS vulnerability in the /group/post component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the title...

CVE-2020-19285

The CVE-2020-19285 entry describes a stored XSS vulnerability in Jeesns 1.4.2. Affected component: /group/apply, where an attacker can inject arbitrary web scripts via the Name field, enabling script execution in a user’s browser. Root cause is improper input handling in the group/apply payload p...

CVE-2020-19286

CVE-2020-19286 is a stored XSS in Jeesns 1.4.2. The vulnerability resides in the /question/detail component, exploitable via a crafted payload in the editor’s source field, allowing arbitrary web scripts or HTML execution. The connected Red Hat, CNVD, OSV, and CVE records corroborate a stored XSS...

CVE-2020-19286

A stored cross-site scripting XSS vulnerability in the /question/detail component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the source field of the editor...

CVE-2020-19284

A stored XSS vulnerability (CVE-2020-19284) affects Jeesns 1.4.2 in the /group/comment component, allowing an attacker to inject arbitrary scripts/HTML via the group comments text field. The connected sources consistently describe this as a stored XSS in that exact location; the root cause is des...

CVE-2020-19284

A stored cross-site scripting XSS vulnerability in the /group/comment component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the group comments text field...

CVE-2020-19283

A reflected cross-site scripting XSS vulnerability in the /newVersion component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML...

CVE-2020-19283

Jeesns 1.4.2 is vulnerable to a reflected cross-site scripting (XSS) in the /newVersion component. The issue allows an attacker to cause the victim’s browser to execute arbitrary web scripts or HTML, with potential outcomes including execution of malicious scripts in a session. The related nuclei...

CVE-2020-19282

A reflected cross-site scripting XSS vulnerability in Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the system error message's text field...

CVE-2020-19282

Jeesns 1.4.2 is affected by a reflected cross-site scripting (XSS) vulnerability in the system error message text field. The issue allows an attacker to inject and execute arbitrary web scripts or HTML in a victim’s browser, potentially enabling session hijacking or data exposure. Root cause is a...

CVE-2020-19281

A stored cross-site scripting XSS vulnerability in the /manage/loginusername component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the username field...

CVE-2020-19281

Jeesns 1.4.2 is affected by a stored XSS in the /manage/loginusername field. The vulnerability allows attackers to inject arbitrary web scripts or HTML via a crafted payload in the username parameter. The connected documents confirm the affected component and entry point but do not provide a patc...

CVE-2020-19280

Jeesns 1.4.2 contains a cross-site request forgery CSRF which allows attackers to escalate privileges and perform sensitive program operations...

CVE-2020-19280

Jeesns 1.4.2 is affected by a cross-site request forgery (CSRF) vulnerability that allows an attacker to escalate privileges and perform sensitive program operations. The available documents consistently describe CSRF as the flaw, but do not provide specific exploit details, affected endpoints, r...