CVE-2021-31280: Improper Neutralization of Input During Web Page Generation

An issue was discovered in tp5cms through 2017-05-25. admin.php/system/set.html has XSS via the keywords parameter...

CVE-2018-19693: Improper Neutralization of Input During Web Page Generation

An issue was discovered in tp5cms through 2017-05-25. admin.php/system/set.html has XSS via the title parameter...

PT-2018-15039

Name of the Vulnerable Software and Affected Versions tp5cms versions prior to 2017-05-25 Description An issue was discovered that allows for XSS via the title parameter in the "admin.php/system/set.html" API endpoint. Recommendations For versions prior to 2017-05-25, as a temporary workaround,...