Jackq Xcms vulnerabilities

• jackq xcms jackq XCMS Password Recovery Mail Endpoint PublicController.class.php sendFindPwdMail sql injection CVE-2026-108799 6.9 MediumOctober 12, 2026
• jackq xcms jackq XCMS Backend ProductImageController.class.php upload unrestricted upload CVE-2025-15110 5.1 MediumDecember 27, 2025
• jackq xcms jackq XCMS upload.php unrestricted upload CVE-2025-15109 6.9 MediumDecember 27, 2025