Ryan Demmer

2 CVEs vendor

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2012-2902 May 21, 18:55 MEDIUM This Month

Unrestricted file upload vulnerability in editor/extensions/browser/file.php in the Joomla Content Editor (JCE) component before 2.1 for Joomla!, when chunking is set to greater than zero, allows. Rated medium severity (CVSS 6.0), this vulnerability is remotely exploitable. No vendor patch available.

PHP File Upload Joomla Content Editor Ryan Demmer

NVD

CVSS 2.0

6.0

EPSS

0.6%

CVE-2012-2901 May 21, 18:55 MEDIUM This Month

Cross-site scripting (XSS) vulnerability in the Profile List in the Joomla Content Editor (JCE) component before 2.1 for Joomla!. Rated medium severity (CVSS 4.3), this vulnerability is remotely exploitable. No vendor patch available.

PHP XSS Joomla Content Editor Ryan Demmer

NVD

CVSS 2.0

4.3

EPSS

0.4%

CVE-2012-2902

EPSS 1% CVSS 6.0

MEDIUM This Month

PHP File Upload Joomla Content Editor +1

NVD

CVE-2012-2901

EPSS 0% CVSS 4.3

MEDIUM This Month

PHP XSS Joomla Content Editor +1

NVD