CVE-2024-1258

A vulnerability was found in Juanpao JPShop up to 1.5.02. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file api/config/params.php of the component API. The manipulation of the argument JWT_KEY_ADMIN leads to use of hard-coded cryptographic key . The complexity of an attack is rather high. The exploitation appears to be difficult. The exploit has been disclosed to the public and may be used. The identifier VDB-252997 was assigned to this vulnerability.

• CWE-321

• https://note.zhaoj.in/share/XblX1My7jNV7Broken Link
• https://vuldb.com/?ctiid.252997Permissions Required, Third Party Advisory
• https://vuldb.com/?id.252997Third Party Advisory
• https://vuldb.com/?submit.277418
• https://note.zhaoj.in/share/XblX1My7jNV7Broken Link
• https://vuldb.com/?ctiid.252997Permissions Required, Third Party Advisory
• https://vuldb.com/?id.252997Third Party Advisory
• https://vuldb.com/?submit.277418

Published

Feb 6, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-12574The SVG Shortcode plugin for WordPress is vulnerable to Stor…5.4
• CVE-2024-12575The Poll Maker – Versus Polls, Anonymous Polls, Image Polls …5.3
• CVE-2024-12576Software installed and run as a non-privileged user may cond…5.5
• CVE-2024-12577Kernel software installed and running inside a Guest VM may …7.3
• CVE-2024-12578The Tickera – WordPress Event Ticketing plugin for WordPress…5.3
• CVE-2024-12579The Minify HTML plugin for WordPress is vulnerable to Regula…5.3
• CVE-2024-12580A vulnerability in danny-avila/librechat prior to version 0.…5.3
• CVE-2024-12581The Gutenberg Blocks with AI by Kadence WP – Page Builder Fe…4.8
• CVE-2024-12582A flaw was found in the skupper console, a read-only interf…7.1
• CVE-2024-12583The Dynamics 365 Integration plugin for WordPress is vulnera…9.9
• CVE-2024-12584The 140+ Widgets | Xpro Addons For Elementor – FREE plugin f…6.5
• CVE-2024-12585The Property Hive WordPress plugin before 2.1.1 does not san…6.1