Vulnerabilities in xjb
4 resultsCVE-2024-8484HIGHREST API TO MiniProgram <= 4.7.1 - Unauthenticated SQL InjectionEPSS 3.6%CVE-2024-8485CRITICALREST API TO MiniProgram <= 4.7.1 - Unauthenticated Arbitrary User Email Update and Privilege Escalation via Account TakeoverEPSS 0.6%CVE-2026-3460MEDIUMREST API TO MiniProgram <= 5.1.2 - Authenticated (Subscriber+) Insecure Direct Object Reference via 'userid' REST API ParameterEPSS 0.3%CVE-2025-28886MEDIUMWordPress REST API TO MiniProgram plugin <= 5.1.2 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.2%