Skip to content
Every CVE
Browse
Docs
Sources
Guide
Search
/
Get
API key
Every CVE
Vendors
Jackq
Jackq vulnerabilities
Products
Xcms
3
Newest
jackq
xcms
jackq XCMS Password Recovery Mail Endpoint PublicController.class.php sendFindPwdMail sql injection
CVE-2026-108799
6.9
Medium
October 12, 2026
jackq
xcms
jackq XCMS Backend ProductImageController.class.php upload unrestricted upload
CVE-2025-15110
5.1
Medium
December 27, 2025
jackq
xcms
jackq XCMS upload.php unrestricted upload
CVE-2025-15109
6.9
Medium
December 27, 2025
esc
Pages
All vulnerabilities
Browse
Docs
Sources
Guide
Get API key
Move
Enter
Open