CVE-2023-27090

Cross Site Scripting vulnerability found in TeaCMS storage allows attacker to cause a leak of sensitive information via the article title parameter...

CVE-2023-27090: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability found in TeaCMS storage allows attacker to cause a leak of sensitive information via the article title parameter...

PT-2023-20947 · Teacms · Teacms

Name of the Vulnerable Software and Affected Versions: TeaCMS affected versions not specified Description: A Cross Site Scripting issue in TeaCMS storage allows an attacker to cause a leak of sensitive information via the article title parameter. This enables the attacker to potentially access or...

TeaCMS 跨站脚本漏洞

TeaCMS is a blogging system by the individual developer XiaoBingBy. A security vulnerability exists in TeaCMS, which stems from a stored cross-site scripting vulnerability that can be exploited by an attacker to disclose sensitive information...

CVE-2023-27090

CVE-2023-27090 is a stored Cross-Site Scripting vulnerability in TeaCMS storage. The issue allows an attacker to exfiltrate sensitive data by manipulating the article title parameter. Documented impact in the sources is confidentiality leakage with a CVSSv3.1 base score of 5.4 (NETWORK, LOW explo...

CVE-2023-27090

Cross Site Scripting vulnerability found in TeaCMS storage allows attacker to cause a leak of sensitive information via the article title parameter...

CVE-2023-27091

An unauthorized access issue found in XiaoBingby TeaCMS 2.3.3 allows attackers to escalate privileges via the id and keywords parameters...

CVE-2023-27091

An unauthorized access issue found in XiaoBingby TeaCMS 2.3.3 allows attackers to escalate privileges via the id and keywords parameters...

Design/Logic Flaw

An unauthorized access issue found in XiaoBingby TeaCMS 2.3.3 allows attackers to escalate privileges via the id and keywords parameters...

CVE-2023-27091

An unauthorized access issue found in XiaoBingby TeaCMS 2.3.3 allows attackers to escalate privileges via the id and keywords parameters...

CVE-2023-27091: Improper Authentication

An unauthorized access issue found in XiaoBingby TeaCMS 2.3.3 allows attackers to escalate privileges via the id and keywords parameters...

CVE-2023-27091

An unauthorized access issue found in XiaoBingby TeaCMS 2.3.3 allows attackers to escalate privileges via the id and keywords parameters...

XiaoBingby TeaCMS 授权问题漏洞

XiaoBingBy TeaCMS is a blog system by xiaobingby personal developer. A security vulnerability exists in XiaoBingby TeaCMS 2.3.3, which stems from an unauthorized access issue in the system that can be exploited by an attacker to elevate privileges via the id and keywords parameters...

CVE-2023-27091

CVE-2023-27091 affects XiaoBingby TeaCMS (version 2.3.3). The connected records describe an unauthorized access issue that allows attackers to escalate privileges via the id and keywords parameters. The vulnerability is evidenced across multiple sources (NVD, Red Hat, PRion, CNNVD, PT-SEC) with t...

PT-2023-20948 · Unknown · Xiaobingby Teacms

Name of the Vulnerable Software and Affected Versions: XiaoBingby TeaCMS version 2.3.3 Description: An unauthorized access issue allows attackers to escalate privileges via the id and keywords parameters. Recommendations: For XiaoBingby TeaCMS version 2.3.3, consider restricting access to the id...

CVE-2023-1616

A vulnerability was found in XiaoBingBy TeaCMS up to 2.0.2. It has been classified as problematic. Affected is an unknown function of the component Article Title Handler. The manipulation with the input alertdocument.cookie leads to cross site scripting. It is possible to launch the attack...

CVE-2023-1616

A vulnerability was found in XiaoBingBy TeaCMS up to 2.0.2. It has been classified as problematic. Affected is an unknown function of the component Article Title Handler. The manipulation with the input alertdocument.cookie leads to cross site scripting. It is possible to launch the attack...

Cross site scripting

A vulnerability was found in XiaoBingBy TeaCMS up to 2.0.2. It has been classified as problematic. Affected is an unknown function of the component Article Title Handler. The manipulation with the input alertdocument.cookie leads to cross site scripting. It is possible to launch the attack...

CVE-2023-1616

CVE-2023-1616 affects XiaoBingBy TeaCMS up to version 2.0.2, specifically the Article Title Handler component. The issue is a cross-site scripting vulnerability triggered by manipulating input such as , with remote exploitability. The public exploit is noted, and multiple sources confirm the vuln...

CVE-2023-1616 XiaoBingBy TeaCMS Article Title cross site scripting

A vulnerability was found in XiaoBingBy TeaCMS up to 2.0.2. It has been classified as problematic. Affected is an unknown function of the component Article Title Handler. The manipulation with the input alertdocument.cookie leads to cross site scripting. It is possible to launch the attack...