What’s Vulnerable › Products
jackq XCMS vulnerabilities
3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.
Check whether your jackq XCMS version is affected
Latest jackq XCMS vulnerabilities
- CVE-2026-108799 — jackq XCMS Password Recovery Mail Endpoint PublicController.class.php sendFindPwdMail sql injection (CVSS 7.3)
- CVE-2025-15110 — jackq XCMS Backend ProductImageController.class.php upload unrestricted upload (CVSS 7.2)
- CVE-2025-15109 — jackq XCMS upload.php unrestricted upload (CVSS 7.3)