Vulnerabilities > Jcow > Jcow CMS

DATE CVE VULNERABILITY TITLE RISK
2020-01-14 CVE-2011-3202 Cross-site Scripting vulnerability in Jcow CMS 4.2
A Cross-Site Scripting (XSS) vulnerability exists in the g parameter to index.php in Jcow CMS 4.2 and earlier.
network
jcow CWE-79
4.3
4.3
2020-01-14 CVE-2011-3203 Improper Input Validation vulnerability in Jcow CMS 4.2/5.2
A Code Execution vulnerability exists the attachment parameter to index.php in Jcow CMS 4.x to 4.2 and 5.2 to 5.2.
network
low complexity
jcow CWE-20
7.5
7.5