Vulnerabilities

TI-2019-10688 CVE-2019-14344 · GHSA-vxv8-fwqc-g2gq

TemaTres 3.0 has reflected XSS via the replace_string or search_string parameter to the…

LOW 28

TemaTres 3.0 has reflected XSS via the replace_string or search_string parameter to the vocab/admin.php?doAdmin=bulkReplace URI.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00718 Published 2019-12-13 No fix listed CWE-79

TI-2019-10689 CVE-2019-14345 · GHSA-fcfc-cp3g-xgf3

MEDIUM 46

TemaTres 3.0 allows remote unprivileged users to create an administrator account

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02022 Published 2019-11-15 No fix listed

TI-2019-10687 CVE-2019-14343 · GHSA-3976-7rwg-xx73

LOW 26

TemaTres 3.0 has stored XSS via the value parameter to the vocab/admin.php?vocabulario_id=list URI.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.0094 Published 2019-11-15 No fix listed CWE-79