Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-09603
HistoryFeb 10, 2023 - 12:00 a.m.

TPCMS Cross-Site Scripting Vulnerability (CNVD-2023-09603)

2023-02-1000:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
tpcms
cross-site scripting
vulnerability
source of happiness
arbitrary code

0.001 Low

EPSS

Percentile

30.5%

TPCMS is an open source content management system from the individual developers of Source of Happiness. version 3.2 of TPCMS is vulnerable to cross-site scripting. A remote attacker can use this vulnerability to run arbitrary code via the cfg_copyright or cfg_tel fields in the site configuration page.

CPENameOperatorVersion
tpcms tpcmseq3.2

0.001 Low

EPSS

Percentile

30.5%

Related for CNVD-2023-09603