WidgetfactorylimitedCVEs & Vulnerabilities
2 CVEs affecting Widgetfactorylimited products, tracked from the National Vulnerability Database, with CVSS/EPSS scores and exploitation status.
2 CVEs→ All vendors
Most Affected Products
com jce 18jce 1
CVE-2015-7339HIGH
JCE Joomla Component 2.5.0 to 2.5.2 allows arbitrary file upload via a .php file extension for an image file to the /com_jce/editor/libraries/classes/browser.php script.
9 Mar 2020
8.8
CVSS
CVE-2011-5134MEDIUM
Unrestricted file upload vulnerability in editor/extensions/browser/file.php in the JCE component before 2.0.18 for Joomla! allows remote authenticated users with the author privileges to execute arbitrary PHP code by uploading a file with a double extension, as demonstrated by .php.gif. NOTE: some of these details are obtained from third party information.
31 Aug 2012
6.0
CVSS
← PrevPage 1 / 1Next →