3 matches found
Cross site scripting
TemaTres 3.0 has reflected XSS via the replacestring or searchstring parameter to the vocab/admin.php?doAdmin=bulkReplace URI...
4.3CVSS5.9AI score0.00718EPSS
SaveExploits0References2Affected Software1
CVE-2019-14344
TemaTres 3.0 is affected by a reflected XSS in the vocab/admin.php?doAdmin=bulkReplace endpoint via the replace_string or search_string parameters. The vulnerability stems from insufficient input handling, enabling injection of script/code that can impact user sessions through client-side executi...
6.1CVSS5.9AI score0.00718EPSS
SaveExploits0References2Affected Software1
CVE-2019-14344: Improper Neutralization of Input During Web Page Generation
TemaTres 3.0 has reflected XSS via the replacestring or searchstring parameter to the vocab/admin.php?doAdmin=bulkReplace URI...
6.1CVSS6.3AI score0.00718EPSS
SaveExploits0References2
20