CVE-2018-20528

The CVE-2018-20528 entry affects JEECMS 9 and describes a Server-Side Request Forgery (SSRF) via the ueditor/getRemoteImage.jspx upfile parameter. Connected records confirm the vulnerability is centered on JEECMS 9 and the SSRF condition in the upfile parameter, with an impact that includes Parti...

CVE-2018-19544

JEECMS 9.3 is affected by a Cross-Site Request Forgery (CSRF) vulnerability that can be triggered via the api/admin/content/save URI to add news. The issue is documented across multiple sources (NVD/NVD mirror and CVE listings). The vulnerability details are focused on CSRF in JEECMS 9.3; no expl...

CVE-2018-19545

JEECMS 9.3 contains a CSRF vulnerability in the admin endpoint api/admin/role/save that can be abused to add a new user. Root cause is CSRF on the user-creation pathway; impact is user creation with high severity (CVSS3 base score 8.8) as cited in the CVE record. Exploitation details or fix are n...

CVE-2018-18952

The connected sources confirm CVE-2018-18952 affects JEECMS 9.3 with a cross-site scripting (XSS) vulnerability exploitable via the index.do#/content/update?type=update URI. The underlying issue is an XSS flaw in that endpoint, enabling injected script in user-controlled content. The available do...

CVE-2020-20799

The provided connected documents confirm a stored cross-site scripting (XSS) vulnerability in JeeCMS 1.0.1, allowing an attacker to execute arbitrary web scripts or HTML via a crafted payload in the commentText parameter. The CVE description consistently describes this issue as JeeCMS 1.0.1’s lac...