← Back

Jalios

jalios

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Jcms
jcms
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-15497
1Jalios
1Jcms
Jun 17, 2026
Jul 17, 2020
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
jcore/portal/ajaxPortal.jsp in Jalios JCMS 10.0.2 build-20200224104759 allows XSS via the types parameter. Note: It is asserted that this vulnerability is not present in the standard installation of Jalios JCMS
CVE-2019-19033
1Jalios
1Jcms
Jun 17, 2026
Nov 21, 2019
N/A· v4
9.8 CRITICAL· v3
7.5 HIGH· v2
Jalios JCMS 10 allows attackers to access any part of the website and the WebDAV server with administrative privileges via a backdoor account, by using any username and the hardcoded dev password.