Skip to content
OpenAdvisories

Vendor

jackq

3 known vulnerabilities.

Products

XCMS 3
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 4.7
    CVE-2025-15110

    jackq XCMS Backend ProductImageController.class.php upload unrestricted upload

    A vulnerability has been found in jackq XCMS up to 3fab5342cc509945a7ce1b8ec39d19f701b89261. Affected is the function Upload of the file Admin/Home/Controller/ProductImageController.class.php of the component Backend. Such manipulation of the argument File le…

    jackq XCMS