Vendors / Twcms Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now Twcms records in CISA KEV No Twcms vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 27
Cross Site Scripting vulnerability in TWCMS v.2.0.3 allows a remote attacker to execute arbitrary code via the /TWCMS-gh-pages/twcms/runtime/twcms_view/default,index.htm.php" PHP directly echoes parameters input from ext…
CVSS 3.1 MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00374 · Published 2024-06-12 · No fix listed CWE-79
Priority LOW 22
Cross Site Scripting vulnerability in TWCMS v.2.6 allows a local attacker to execute arbitrary code via a crafted script
CVSS 3.1 MEDIUM 5.0· Local · No auth · User interaction · EPSS 0.00262 · Published 2024-04-25 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
Critical0 High0 Medium2 Low0 No CVSS0