Jackq vulnerabilities
We track 3 vulnerabilities in Jackq products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 12, 2026.
Latest Jackq vulnerabilities
- 7.3 High severity
XCMS: Improper Neutralization of Special Elements in Output Used by a Downstream Component
A vulnerability was determined in jackq XCMS up to 3fab5342cc509945a7ce1b8ec39d19f701b89261. Impacted is the function PublicController::sendFindPwdMail of the file Admin/Home/Controller/PublicController.class.php of the component Password Recovery Mail Endpoin
- 7.2 High severity
XCMS: Unrestricted Upload of File with Dangerous Type
A vulnerability has been found in jackq XCMS up to 3fab5342cc509945a7ce1b8ec39d19f701b89261. Affected is the function Upload of the file Admin/Home/Controller/ProductImageController.class.php of the component Backend. Such manipulation of the argument File lea
- 7.3 High severity
XCMS: Improper Access Control
A flaw has been found in jackq XCMS up to 3fab5342cc509945a7ce1b8ec39d19f701b89261. This impacts an unknown function of the file Public/javascripts/admin/plupload-2.1.2/examples/upload.php. This manipulation causes unrestricted upload. It is possible to initia