WebStack-Guns vulnerabilities

2 known vulnerabilities in WebStack-Guns from Jsnjfz. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.2 High severity

  WebStack-Guns: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2025-13811Dec 1, 2025Jsnjfz

  A vulnerability was determined in jsnjfz WebStack-Guns 1.0. This vulnerability affects unknown code of the file src/main/java/com/jsnjfz/manage/core/common/constant/factory/PageFactory.java. Executing a manipulation of the argument sort can lead to sql injecti

• 7.5 High severity

  WebStack-Guns: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-13810Dec 1, 2025JsnjfzEPSS 1.09%

  A vulnerability was found in jsnjfz WebStack-Guns 1.0. This affects the function renderPicture of the file src/main/java/com/jsnjfz/manage/modular/system/controller/KaptchaController.java. Performing a manipulation results in path traversal. It is possible to