Jojo Cms

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2013-3082 MEDIUM POC PATCH This Month

Cross-site scripting (XSS) vulnerability in plugins/jojo_core/forgot_password.php in Jojo before 1.2.2 allows remote attackers to inject arbitrary web script or HTML via the search parameter to. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. Public exploit code available.

XSS PHP Jojo Cms

NVD Exploit-DB GitHub

CVSS 2.0

4.3

EPSS

2.0%

CVE-2013-3081 HIGH POC PATCH This Week

SQL injection vulnerability in the checkEmailFormat function in plugins/jojo_core/classes/Jojo.php in Jojo before 1.2.2 allows remote attackers to execute arbitrary SQL commands via the. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available.

PHP SQLi Jojo Cms

NVD Exploit-DB GitHub

CVSS 2.0

7.5

EPSS

0.8%

CVE-2013-3082

EPSS 2% CVSS 4.3

MEDIUM POC PATCH This Month

XSS PHP Jojo Cms

NVD Exploit-DB GitHub

CVE-2013-3081

EPSS 1% CVSS 7.5

HIGH POC PATCH This Week

PHP SQLi Jojo Cms

NVD Exploit-DB GitHub