Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A vulnerability was found in erzhongxmu JEEWMS up to 3.7. This affects an unknown part of the file src/main/webapp/plug-in/ueditor/jsp/getContent.jsp of the component UEditor. The manipulation of the argument myEditor results in cross site scripting. The attack can be launched remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
CVE-2026-3027 A vulnerability was found in erzhongxmu JEEWMS up to 3.7. This affects an unknown part of the file src/main/webapp/plug-in/ueditor/jsp/getContent.jsp of the component U… https://www.cve.org/CVERecord?id=CVE-2026-3027
Post summary
A vulnerability was identified in erzhongxmu JEEWMS up to version 3.7, affecting an unspecified part of a JSP file, with no further details on exploitation or mitigation.
CVE-2026-3027 Cross-Site Scripting in JEEWMS UEditor via Argument Manipulation https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-3027 Vulnerability Alert Subscriptions: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=1
Post summary
A new XSS vulnerability (CVE-2026-3027) in JEEWMS UEditor has been disclosed, with details available via the provided link.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | jeewms | jeewms | - | - | - |