JPlatform vulnerabilities

2 known vulnerabilities in JPlatform from Jalios. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.6 High severity

  JPlatform: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-0942Apr 7, 2025Jalios

  The DB chooser functionality in Jalios JPlatform 10 SP6 before 10.0.6 improperly neutralizes special elements used in an SQL command allows for unauthenticated users to trigger SQL Injection. This issue affects JPlatform before 10.0.6 and a PatchPlugin release

• 7.3 High severity

  JPlatform: Improper Neutralization of Input During Web Page Generation

  CVE-2025-25035Mar 21, 2025Jalios

  Improper Neutralization of Input During Web Page Generation Cross-site Scripting vulnerability in Jalios JPlatform 10 allows for Reflected XSS and Stored XSS.This issue affects JPlatform 10: before 10.0.8 (SP8), before 10.0.7 (SP7), before 10.0.6 (SP6) and Jal