JeeSite vulnerabilities

CVEs whose affected-version data names the JeeSite package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-119048Medium· 4.2

1w ago

JeeSite 5.11.0 through 5.19.1 IDOR in AI CMS Chat Module

JeeSite 5.11.0 through 5.19.1 contains an insecure direct object reference vulnerability in the AI CMS chat module that allows authenticated users to access other users' conversations due to missing and reversed ownership checks. Attacke…

▾ Sunlitthinkgem · JeeSiteEPSS 0.27%via CVEORG