Tthinkgem

Products

Exploited and recent CVEs

• CVE-2026-119048 Medium 4.2 JeeSite 5.11.0 through 5.19.1 IDOR in AI CMS Chat Module 0.3%
• CVE-2026-3405 Low 3.1 thinkgem JeeSite Connection path traversal 0.7%
• CVE-2026-3404 Medium 5.0 thinkgem JeeSite Endpoint CasOutHandler.java xml external entity reference 0.4%
• CVE-2025-9796 Low 3.5 thinkgem JeeSite EncodeUtils.java decodeUrl2 cross site scripting 0.4%
• CVE-2025-7865 Low 3.5 thinkgem JeeSite XSS Filter EncodeUtils.java xssFilter cross site scripting 0.4%
• CVE-2025-7864 Medium 6.3 thinkgem JeeSite FileUploadController.java upload unrestricted upload 0.4%
• CVE-2025-7863 Low 3.5 thinkgem JeeSite ServletUtils.java redirectUrl 0.4%
• CVE-2025-7785 Medium 4.3 thinkgem JeeSite SsoController.java sso redirect 0.5%
• CVE-2025-7763 Medium 4.3 thinkgem JeeSite Site Controller SiteController.java select redirect 0.5%
• CVE-2025-7759 Medium 6.3 thinkgem JeeSite UEditor Image Grabber ActionEnter.java server-side request forgery 0.4%
• CVE-2025-5186 Medium 6.3 thinkgem JeeSite URI Scheme form ResourceLoader.getResource server-side request forgery 0.5%
• CVE-2024-8112 Medium 4.3 thinkgem JeeSite Cookie login cross site scripting 0.5%