JCD vulnerabilities
We track 2 vulnerabilities in JCD products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on July 20, 2026.
2vulnerabilities
1critical
1high
0exploited
8.4average CVSS score
Latest JCD vulnerabilities
- 9.3 Critical severity
Windu CMS: Improper Neutralization of Special Elements used in an SQL Command
A Blind SQL injection vulnerability has been identified in Windu CMS. A remote unauthenticated attacker is able to inject SQL syntax into URL path in HTTP header resulting in Blind SQL Injection. Because vendor contact attempts were unsuccessful, the vulnerabi
- 7.5 High severity
Windu CMS: Improper Restriction of Excessive Authentication Attempts
Windu CMS implements weak client-side brute-force protection by using parameter loginError. Information about attempt count or timeout is not stored on the server, which allows a malicious attacker to bypass this brute-force protection by resetting this parame