CVE-2011-4563

Cross-site scripting (XSS) vulnerability in index.php in JAKCMS 2.0.4.1, and possibly other versions before 2.2.6 2011-09-23, allows remote attackers to inject arbitrary web script or HTML via the userpost parameter in a PM request, related to tinymce. NOTE: some of these details are obtained from third party information.

• CWE-79

• http://secunia.com/advisories/46378Vendor Advisory
• http://www.jakcms.com/tracker/t/62/cross-site-scripting-flawVendor Advisory, URL Repurposed
• http://www.securityfocus.com/bid/50034
• http://secunia.com/advisories/46378Vendor Advisory
• http://www.jakcms.com/tracker/t/62/cross-site-scripting-flawVendor Advisory, URL Repurposed
• http://www.securityfocus.com/bid/50034

Published

Nov 28, 2011

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2011-4555One Click Orgs before 1.2.3 does not require unique e-mail a…
• CVE-2011-4558Tiki 8.2 and earlier allows remote administrators to execute…7.2
• CVE-2011-4559SQL injection vulnerability in the Calendar module in vTiger…
• CVE-2011-4560Cross-site scripting (XSS) vulnerability in the Petition Nod…
• CVE-2011-4561Cross-site scripting (XSS) vulnerability in admin.php in Pho…
• CVE-2011-4562Multiple cross-site scripting (XSS) vulnerabilities in (1) v…
• CVE-2011-4564Cross-site scripting (XSS) vulnerability in the admin script…
• CVE-2011-4565Multiple cross-site scripting (XSS) vulnerabilities in XOOPS…
• CVE-2011-4566Integer overflow in the exif_process_IFD_TAG function in exi…
• CVE-2011-4567Cross-site scripting (XSS) vulnerability in includes/templat…
• CVE-2011-4568Cross-site scripting (XSS) vulnerability in view/frontend-he…
• CVE-2011-4569SQL injection vulnerability in userbarsettings.php in the Us…