CVE-2024-22824

A remote attacker can execute arbitrary code in Timo v.2.0.3 due to insufficient filetype restrictions within the UploadController.java component. This vulnerability allows for unauthorized code execution via the file upload functionality. As a mitigation, users are advised to disable the UploadC...

CVE-2026-30162

A Cross Site Scripting (XSS) vulnerability exists in Timo version 2.0.3 , a backend management system developed by auntvt. The root cause is the improper neutralization of input within the title field , where the application fails to adequately sanitize or encode data. An attacker can exploit thi...