Jara Project Jara vulnerabilities

• jara Jara 1.6 has an XSS vulnerability CVE-2011-4095 Public exploit 6.1 MediumJanuary 21, 2020
• jara Jara 1.6 has a SQL injection vulnerability. CVE-2011-4094 Public exploit 9.8 CriticalJanuary 21, 2020