CVE-2020-21729

CVE-2020-21729 affects JEECMS (x1.1). The vulnerability is a stored XSS in the /member-vipcenter.htm component, allowing an attacker to inject and execute arbitrary web scripts or HTML via a crafted payload. The issue stems from unvalidated input on that page. Documented impact is client-side cod...

PT-2021-10660

Name of the Vulnerable Software and Affected Versions: JEECMS version x1.1 Description: The issue is a stored cross-site scripting XSS vulnerability in the component of "/member-vipcenter.htm". This allows attackers to execute arbitrary web scripts or HTML via a crafted payload. Recommendations:...

CVE-2020-21729: Improper Neutralization of Input During Web Page Generation

JEECMS x1.1 contains a stored cross-site scripting XSS vulnerability in the component of /member-vipcenter.htm, which allows attackers to execute arbitrary web scripts or HTML via a crafted payload...