XJ
Vendor
xjb
4
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-3460 | RA REST API TO MiniProgram xjb | 5.3 | Mar 21 | REST API TO MiniProgram <= 5.1.2 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'userid' REST API Parameter |
| CVE-2025-28886 | RA REST API TO MiniProgram xjb | 4.3 | Mar 11 | WordPress REST API TO MiniProgram plugin <= 5.1.2 - Cross Site Request Forgery (CSRF) vulnerability |
| CVE-2024-8485 | RA REST API TO MiniProgram xjb | 9.8 | Sep 25 | REST API TO MiniProgram <= 4.7.1 - Unauthenticated Arbitrary User Email Update and Privilege Escalation via Account Takeover |
| CVE-2024-8484 | RA REST API TO MiniProgram xjb | 7.5 | Sep 25 | REST API TO MiniProgram <= 4.7.1 - Unauthenticated SQL Injection |
