Jcow provides a content management system targeted at small-business and community-oriented deployments, with a limited but specialized vulnerability surface. The durable signal centers on application-layer input handling and data exposure, with recurring weaknesses in input validation, cross-site scripting, and sensitive-information disclosure characteristic of web-application architectures. Current exploitation activity, severity distribution, and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Jcow over time
Signals from CVEs in this vendor scope (3 CVEs).
3 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2011-3203CRITICAL A Code Execution vulnerability exists the attachment parameter to index.php in Jcow CMS 4.x to 4.2 and 5.2 to 5.2. | Jan 14, 2020 | 9.8 | 31 | NO | NO |
CVE-2011-3202MEDIUM A Cross-Site Scripting (XSS) vulnerability exists in the g parameter to index.php in Jcow CMS 4.2 and earlier. | Jan 14, 2020 | 6.1 | 21 | NO | NO |
CVE-2011-3746MEDIUM Jcow 4.2.1 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by | Sep 23, 2011 | 5.0 | 17 | NO | NO |
Signals from CVEs in this vendor scope (3 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Jcow.
Media articles that mention a CVE ID that affects a product developed by Jcow — matched by CVE ID, not by vendor name.