Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
XiaoBingBy records in CISA KEVNo XiaoBingBy vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority MEDIUM 57
A vulnerability classified as problematic was found in XiaoBingby TeaCMS 2.0.2.
CVSS 4.0MEDIUM 5.3· Network · No auth · User interaction · EPSS 0.00281 · Published 2025-05-21 · No fix listed CWE-352
Priority MEDIUM 43
A vulnerability has been found in XiaoBingBy TeaCMS up to 2.0.2 and classified as critical.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00621 · Published 2023-03-18 · No fix listed CWE-89
Priority MEDIUM 40
A vulnerability classified as critical was found in XiaoBingBy TeaCMS 2.0.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00965 · Published 2023-03-14 · No fix listed CWE-24
Priority LOW 35
An unauthorized access issue found in XiaoBingby TeaCMS 2.3.3 allows attackers to escalate privileges via the id and keywords parameter(s).
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00702 · Published 2023-04-04 · No fix listed CWE-287
Priority LOW 25
Cross Site Scripting vulnerability found in TeaCMS storage allows attacker to cause a leak of sensitive information via the article title parameter.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00427 · Published 2023-04-20 · No fix listed CWE-79
Priority LOW 25
A vulnerability was found in XiaoBingBy TeaCMS up to 2.0.2.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00475 · Published 2023-03-24 · No fix listed CWE-79
Open these records in search →