CVE-2024-49314: Jiangqie Free Mini Program

Critical severity, CVSS 10.0. EPSS: 0.5% chance of exploitation in the next 30 days.

Unrestricted Upload of File with Dangerous Type vulnerability in jiangqie JiangQie Free Mini Program jiangqie-free-mini-program allows Upload a Web Shell to a Web Server.This issue affects JiangQie Free Mini Program: from n/a through <= 2.5.2.

Affected products

• Jiangqie Jiangqie Free Mini Program: up to and including 2.5.2
• Zhuige Jiangqie Free Mini Program: up to and including 2.5.2

Published 2024-10-17. Last modified 2026-06-17.