Lucene search
Joyplus-cms ProjectJoyplus-cms
3 matches found
CVE-2018-10028
joyplus-cms 1.6.0 allows remote attackers to obtain sensitive information via a direct request to the install/ or log/ URI.
5.3CVSS5.1AI score0.00244EPSS
CVE-2018-10096
joyplus-cms 1.6.0 has XSS via the device_name parameter in a manager/admin_ajax.php?action=save flag=add request.
4.8CVSS4.8AI score0.00235EPSS
CVE-2018-10073
joyplus-cms 1.6.0 has XSS in manager/admin_vod.php via the keyword parameter.
4.8CVSS4.9AI score0.00235EPSS