thinkgem JeeSite vulnerabilities

CVEs per yearBy the year they were published

1. 20241
2. 20258
3. 20263

Newest CVEs

• CVE-2026-119048

  JeeSite 5.11.0 through 5.19.1 IDOR in AI CMS Chat Module

  thinkgem · JeeSite

  Low2.3
• CVE-2026-3405

  thinkgem JeeSite Connection path traversal

  thinkgem · JeeSite

  Low2.3
• CVE-2026-3404

  thinkgem JeeSite Endpoint CasOutHandler.java xml external entity reference

  thinkgem · JeeSite

  Low2.3
• CVE-2025-9796

  thinkgem JeeSite EncodeUtils.java decodeUrl2 cross site scripting

  thinkgem · JeeSite

  Medium5.1
• CVE-2025-7865

  thinkgem JeeSite XSS Filter EncodeUtils.java xssFilter cross site scripting

  thinkgem · JeeSite

  Medium5.1
• CVE-2025-7864

  thinkgem JeeSite FileUploadController.java upload unrestricted upload

  thinkgem · JeeSite

  Medium5.3
• CVE-2025-7863

  thinkgem JeeSite ServletUtils.java redirectUrl

  thinkgem · JeeSite

  Medium5.1
• CVE-2025-7785

  thinkgem JeeSite SsoController.java sso redirect

  thinkgem · JeeSite

  Medium5.3
• CVE-2025-7763

  thinkgem JeeSite Site Controller SiteController.java select redirect

  thinkgem · JeeSite

  Medium5.3
• CVE-2025-7759

  thinkgem JeeSite UEditor Image Grabber ActionEnter.java server-side request forgery

  thinkgem · JeeSite

  Medium5.3