Thinkgem Jeesite vulnerabilities

• thinkgem jeesite JeeSite 5.11.0 through 5.19.1 IDOR in AI CMS Chat Module CVE-2026-119048 2.3 LowOctober 29, 2026
• jeesite thinkgem JeeSite Connection path traversal CVE-2026-3405 2.3 LowMarch 2, 2026
• jeesite thinkgem JeeSite Endpoint CasOutHandler.java xml external entity reference CVE-2026-3404 2.3 LowMarch 2, 2026
• jeesite thinkgem JeeSite EncodeUtils.java decodeUrl2 cross site scripting CVE-2025-9796 5.1 MediumSeptember 1, 2025
• jeesite thinkgem JeeSite XSS Filter EncodeUtils.java xssFilter cross site scripting CVE-2025-7865 5.1 MediumJuly 20, 2025
• jeesite thinkgem JeeSite FileUploadController.java upload unrestricted upload CVE-2025-7864 5.3 MediumJuly 20, 2025
• jeesite thinkgem JeeSite ServletUtils.java redirectUrl CVE-2025-7863 5.1 MediumJuly 20, 2025
• jeesite thinkgem JeeSite SsoController.java sso redirect CVE-2025-7785 5.3 MediumJuly 18, 2025
• jeesite thinkgem JeeSite Site Controller SiteController.java select redirect CVE-2025-7763 5.3 MediumJuly 17, 2025
• jeesite thinkgem JeeSite UEditor Image Grabber ActionEnter.java server-side request forgery CVE-2025-7759 5.3 MediumJuly 17, 2025
• jeesite thinkgem JeeSite URI Scheme form ResourceLoader.getResource server-side request forgery CVE-2025-5186 5.3 MediumMay 26, 2025
• jeesite thinkgem JeeSite Cookie login cross site scripting CVE-2024-8112 6.9 MediumAugust 23, 2024
• jeesite Jeesite 1.2.7 is affected by: SQL Injection. The impact is: sensitive information disclosure. The... CVE-2019-1010201 6.5 MediumJuly 23, 2019
• jeesite Jeesite 1.2.7 is affected by: XML External Entity (XXE). The impact is: sensitive information... CVE-2019-1010202 6.5 MediumJuly 23, 2019