CVE-2021-31280

An issue was discovered in tp5cms through 2017-05-25. admin.php/system/set.html has XSS via the keywords parameter...

CVE-2021-31280: Improper Neutralization of Input During Web Page Generation

An issue was discovered in tp5cms through 2017-05-25. admin.php/system/set.html has XSS via the keywords parameter...

CVE-2021-31280

CVE-2021-31280 affects tp5cms prior to or through 2017-05-25. The issue is a cross-site scripting (XSS) vulnerability in admin.php/system/set.html exploitable via the keywords parameter. The related Red Hat/NVD/EU references corroborate an XSS in tp5cms with the same endpoint and parameter. CVSS ...

Design/Logic Flaw

An issue was discovered in tp5cms through 2017-05-25. admin.php/system/set.html has XSS via the title parameter...

PT-2018-15039

Name of the Vulnerable Software and Affected Versions tp5cms versions prior to 2017-05-25 Description An issue was discovered that allows for XSS via the title parameter in the "admin.php/system/set.html" API endpoint. Recommendations For versions prior to 2017-05-25, as a temporary workaround,...

CVE-2018-19693: Improper Neutralization of Input During Web Page Generation

An issue was discovered in tp5cms through 2017-05-25. admin.php/system/set.html has XSS via the title parameter...