CVE-2024-44684

TpMeCMS 1.3.3.2 is vulnerable to Cross Site Scripting XSS in /h.php/page?ref=addtabs via the "Title," "Images," and "Content" fields...

CVE-2024-44684

TpMeCMS 1.3.3.2 is vulnerable to Cross Site Scripting XSS in /h.php/page?ref=addtabs via the "Title," "Images," and "Content" fields...

CVE-2024-44684

TpMeCMS 1.3.3.2 is vulnerable to Cross Site Scripting (XSS) in /h.php/page?ref=addtabs via the Title, Images, and Content fields. Documents specify the vulnerable endpoint and parameters but do not provide a fixed patched version. Recommended interim measure from PT-2024-31211 is to restrict acce...

CVE-2024-44684

TpMeCMS 1.3.3.2 is vulnerable to Cross Site Scripting XSS in /h.php/page?ref=addtabs via the "Title," "Images," and "Content" fields...

PT-2024-31211 · Tpmecms · Tpmecms

Name of the Vulnerable Software and Affected Versions: TpMeCMS version 1.3.3.2 Description: The issue is related to Cross Site Scripting XSS in the /h.php/page?ref=addtabs endpoint, specifically via the Title, Images, and Content fields. This allows for potential malicious script injection...

TpMeCMS security vulnerabilities

TpMeCMS is a CMS based on FastAdmin framework developed by Xiaohe personal developer. A security vulnerability exists in TpMeCMS version 1.3.3.2, which originates from a cross-site scripting vulnerability in the Title, Images and Content parameters of the /h.php/page?ref=addtabs file...

CVE-2024-44684: Improper Neutralization of Input During Web Page Generation

TpMeCMS 1.3.3.2 is vulnerable to Cross Site Scripting XSS in /h.php/page?ref=addtabs via the "Title," "Images," and "Content" fields...

CVE-2024-7900

A vulnerability, which was classified as problematic, was found in xiaohe4966 TpMeCMS 1.3.3.2. Affected is an unknown function of the file /h.php/general/config?ref=addtabs of the component Basic Configuration Handler. The manipulation of the argument Site Name/Beian/Contact...

PT-2024-38671 · Xiaohe4966 · Tpmecms

Name of the Vulnerable Software and Affected Versions: xiaohe4966 TpMeCMS version 1.3.3.2 Description: A problematic vulnerability was found in the Basic Configuration Handler component of xiaohe4966 TpMeCMS. The issue affects an unknown function of the file /h.php/general/config?ref=addtabs. The...