PT-2025-10640 · Tianti · Tianti

Name of the Vulnerable Software and Affected Versions: tianti version 2.3 Description: A stored cross-site scripting issue allows attackers to execute arbitrary web scripts or HTML by injecting a crafted payload into the coverImageURL parameter at the "/article/ajax/save" API endpoint...