Joyplus-cms Security Vulnerabilities and Issues — Joyplus-cms CVE List

Lucene search

Joyplus-cms ProjectJoyplus-cms

3 matches found

CVE•added 2018/03/18 6:29 a.m.•38 views

CVE-2018-8766

joyplus-cms 1.6.0 allows Remote Code Execution because of an Arbitrary File Upload issue in manager/editor/upload.php, related to manager/admin_vod.php?action=add.

9.8CVSS9.6AI score0.02647EPSS

Web

CVE•added 2018/03/15 1:29 a.m.•33 views

CVE-2018-8717

joyplus-cms 1.6.0 has CSRF, as demonstrated by adding an administrator account via a manager/admin_ajax.php?action=save&tab={pre}manager request.

8.8CVSS8.5AI score0.00141EPSS

Web

CVE•added 2018/03/18 6:29 a.m.•32 views

CVE-2018-8767

joyplus-cms 1.6.0 has XSS in manager/admin_ajax.php?action=save&tab={pre}vod_type via the t_name parameter.

4.8CVSS4.9AI score0.00235EPSS

Web