Vulnerabilities > Jeesns > Jeesns > 1.3

DATE CVE VULNERABILITY TITLE RISK
2018-11-11 CVE-2018-19178 Cross-site Scripting vulnerability in Jeesns 1.3
In JEESNS 1.3, com/lxinet/jeesns/core/utils/XssHttpServletRequestWrapper.java allows stored XSS via an HTML EMBED element, a different vulnerability than CVE-2018-17886.
network
jeesns CWE-79
3.5
2018-10-02 CVE-2018-17886 Cross-site Scripting vulnerability in Jeesns 1.3
An issue was discovered in JEESNS 1.3.
network
jeesns CWE-79
3.5