Approved changes feed: RSS · Atom

cpe:2.3:a:jeesns:jeesns:1.4.2:*:*:*:*:*:*:*

part: a version: 1.4.2 update: *

VendorJeesns (549e8c6f-4011-52fa-9805-76618e2dd54e)
ProductJeesns (51889ba1-5fb5-582f-b652-6cec52834e7b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/zchuanzhao/jeesns purl2cpe 2026-06-01 10:17:17.069140

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-19295 vulnerable 2026-06-08 05:20:57.253303 Details available
A reflected cross-site scripting (XSS) vulnerability in the /weibo/topic component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML.
Published: 2021-09-09T22:10:45.000Z
Updated: 2024-08-04T14:08:30.631Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-19294 vulnerable 2026-06-08 05:20:57.252789 Details available
A stored cross-site scripting (XSS) vulnerability in the /article/comment component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the article comments section.
Published: 2021-09-09T22:10:46.000Z
Updated: 2024-08-04T14:08:30.635Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-19293 vulnerable 2026-06-08 05:20:57.252502 Details available
A stored cross-site scripting (XSS) vulnerability in the /article/add component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in a posted article.
Published: 2021-09-09T22:10:43.000Z
Updated: 2024-08-04T14:08:30.631Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-19292 vulnerable 2026-06-08 05:20:57.252217 Details available
A stored cross-site scripting (XSS) vulnerability in the /question/ask component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in a posted question.
Published: 2021-09-09T22:10:43.000Z
Updated: 2024-08-04T14:08:30.787Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-19291 vulnerable 2026-06-08 05:20:57.251912 Details available
A stored cross-site scripting (XSS) vulnerability in the /weibo/publishdata component of Jeesns 1.4.2 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in a posted Weibo.
Published: 2021-09-09T22:10:42.000Z
Updated: 2024-08-04T14:08:30.839Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-19290 vulnerable 2026-06-08 05:20:57.251502 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-19289 vulnerable 2026-06-08 05:20:57.250941 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-19288 vulnerable 2026-06-08 05:20:57.250647 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-19287 vulnerable 2026-06-08 05:20:57.250190 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-19286 vulnerable 2026-06-08 05:20:57.249698 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-19285 vulnerable 2026-06-08 05:20:57.249412 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-19284 vulnerable 2026-06-08 05:20:57.248943 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-19283 vulnerable 2026-06-08 05:20:57.248544 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-19282 vulnerable 2026-06-08 05:20:57.248155 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-19281 vulnerable 2026-06-08 05:20:57.247735 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-19280 vulnerable 2026-06-08 05:20:57.247301 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-18035 vulnerable 2026-06-08 05:20:56.827411 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.