6 results (0.021 seconds)

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 2

CVE-2023-34654

https://notcve.org/view.php?id=CVE-2023-34654

taocms <=3.0.2 is vulnerable to Cross Site Scripting (XSS). • https://gist.github.com/ae6e361b/b7f162eba1a91df3ad9dc71ec9935960 https://github.com/ae6e361b/taocms-XSS • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 1

CVE-2020-20725

https://notcve.org/view.php?id=CVE-2020-20725

Cross Site Scripting vulnerability in taogogo taoCMS v.2.5 beta5.1 allows remote attacker to execute arbitrary code via the name field in admin.php. • https://github.com/taogogo/taocms/issues/2 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 4.8EPSS: 0%CPEs: 1EXPL: 1

CVE-2021-25785

https://notcve.org/view.php?id=CVE-2021-25785

Taocms v2.5Beta5 was discovered to contain a cross-site scripting (XSS) vulnerability via the component Management column. Se ha detectado que Taocms versión v2.5Beta5, contiene una vulnerabilidad de tipo cross-site scripting (XSS) por medio del componente Management column • https://github.com/taogogo/taocms/issues/3 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •

CVSS: 7.2EPSS: 0%CPEs: 1EXPL: 1

CVE-2021-25784

https://notcve.org/view.php?id=CVE-2021-25784

Taocms v2.5Beta5 was discovered to contain a blind SQL injection vulnerability via the function Edit Article. Se ha detectado que Taocms versión v2.5Beta5, contiene una vulnerabilidad de inyección SQL ciega por medio de la función Edit Article • https://github.com/taogogo/taocms/issues/4 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •

CVSS: 7.2EPSS: 0%CPEs: 1EXPL: 1

CVE-2021-25783

https://notcve.org/view.php?id=CVE-2021-25783

Taocms v2.5Beta5 was discovered to contain a blind SQL injection vulnerability via the function Article Search. Se ha detectado que Taocms versión v2.5Beta5, contiene una vulnerabilidad de inyección SQL ciega por medio de la función Article Search • https://github.com/taogogo/taocms/issues/5 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •