Vulnerabilities

TI-2025-04512 CVE-2025-5033 · GHSA-5fvr-4vv2-228w

XiaoBingby TeaCMS addUser cross-site request forgery

MEDIUM 57

A vulnerability classified as problematic was found in XiaoBingby TeaCMS 2.0.2.

CVSS 4.0MEDIUM 5.3 Network No auth User interaction EPSS 0.00281 Published 2025-05-21 No fix listed CWE-352

TI-2023-11915 CVE-2023-27090 · GHSA-6v8r-893r-3f27

LOW 25

Cross Site Scripting vulnerability found in TeaCMS storage allows attacker to cause a leak of sensitive information via the article title parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00427 Published 2023-04-20 No fix listed CWE-79

TI-2023-11916 CVE-2023-27091 · GHSA-9875-8h62-hq8g

LOW 35

An unauthorized access issue found in XiaoBingby TeaCMS 2.3.3 allows attackers to escalate privileges via the id and keywords parameter(s).

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00702 Published 2023-04-04 No fix listed CWE-287

TI-2023-01521 CVE-2023-1616 · GHSA-mfv8-f5qm-h453

LOW 25

A vulnerability was found in XiaoBingBy TeaCMS up to 2.0.2.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00475 Published 2023-03-24 No fix listed CWE-79

TI-2023-01402 CVE-2023-1483 · GHSA-556w-76xx-v8h9

MEDIUM 43

A vulnerability has been found in XiaoBingBy TeaCMS up to 2.0.2 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00621 Published 2023-03-18 No fix listed CWE-89

TI-2023-01322 CVE-2023-1398 · GHSA-rpxw-v4qw-9cwh

MEDIUM 40

A vulnerability classified as critical was found in XiaoBingBy TeaCMS 2.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00965 Published 2023-03-14 No fix listed CWE-24