Joobi Jnews vulnerabilities

3 vulnerabilities

Known vulnerabilities in Joobi Jnews, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

8.8CVE-2015-7341joobijnews
EPSS score
1.13%
JNews Joomla Component before 8.5.0 allows arbitrary File Upload via Subscribers or Templates, as demonstrated by the .php5 extension.7.2CVE-2015-7342joobijnews
EPSS score
0.98%
JNews Joomla Component before 8.5.0 allows SQL injection via upload thumbnail, Queue Search Field, Subscribers Search Field, or Newsletters Search Field.4.8CVE-2015-7343joobijnews
EPSS score
0.54%
JNews Joomla Component before 8.5.0 has XSS via the mailingsearch parameter.