Vulnerabilities

TI-2025-12601 CVE-2025-13786 · GHSA-pvg7-jq3v-hmq6

taosir WTCMS index.php fetch code injection

HIGH 70

A vulnerability was detected in taosir WTCMS up to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00607 Published 2025-11-30 No fix listed CWE-74

TI-2025-12598 CVE-2025-13783 · GHSA-jwf9-8pmx-vhcx

taosir WTCMS CommentadminController CommentadminController.class.php delete sql injection

MEDIUM 57

A security flaw has been discovered in taosir WTCMS up to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00343 Published 2025-11-30 No fix listed CWE-74

TI-2025-12597 CVE-2025-13782 · GHSA-jpj2-v98q-h9vj

taosir WTCMS SlideController SlideController.class.php delete sql injection

HIGH 70

A vulnerability was identified in taosir WTCMS up to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665.

CVSS 4.0MEDIUM 6.9 Network No auth No interaction EPSS 0.00417 Published 2025-11-30 No fix listed CWE-74

TI-2024-32326 CVE-2024-48239 · GHSA-65xp-45wv-pvw6

An issue was discovered in WTCMS 1.0.

MEDIUM 55

An issue was discovered in WTCMS 1.0.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0025 Published 2024-10-25 No fix listed CWE-79

TI-2024-32325 CVE-2024-48238 · GHSA-fvm7-9wr5-2cgx

WTCMS 1.0 is vulnerable to SQL Injection in the edit_post method of…

MEDIUM 55

WTCMS 1.0 is vulnerable to SQL Injection in the edit_post method of /Admin\Controller\NavControl.class.php via the parentid parameter.

CVSS 3.1MEDIUM 4.7 Network High privileges No interaction EPSS 0.0029 Published 2024-10-25 No fix listed CWE-89

TI-2024-32324 CVE-2024-48237 · GHSA-5vhw-xq26-5fww

WTCMS 1.0 is vulnerable to Incorrect Access Control in \Common\Controller\HomebaseController.class.php.

HIGH 82

WTCMS 1.0 is vulnerable to Incorrect Access Control in \Common\Controller\HomebaseController.class.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00459 Published 2024-10-25 No fix listed CWE-863

TI-2020-13836 CVE-2020-20349 · GHSA-cjfc-p2gj-cv87

WTCMS 1.0 contains a stored cross-site scripting (XSS) vulnerability in the link address…

LOW 25

WTCMS 1.0 contains a stored cross-site scripting (XSS) vulnerability in the link address field under the background links module.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00531 Published 2021-09-01 No fix listed CWE-79

TI-2020-13835 CVE-2020-20348 · GHSA-j6cj-94fh-962f

WTCMS 1.0 contains a stored cross-site scripting (XSS) vulnerability in the link field…

LOW 25

WTCMS 1.0 contains a stored cross-site scripting (XSS) vulnerability in the link field under the background menu management module.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00531 Published 2021-09-01 No fix listed CWE-79

TI-2020-13834 CVE-2020-20347 · GHSA-q49f-7h5w-8672

WTCMS 1.0 contains a stored cross-site scripting (XSS) vulnerability in the source field…

LOW 25

WTCMS 1.0 contains a stored cross-site scripting (XSS) vulnerability in the source field under the article management module.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00503 Published 2021-09-01 No fix listed CWE-79

TI-2020-13833 CVE-2020-20345 · GHSA-gcv5-33hh-8rwr

WTCMS 1.0 contains a reflective cross-site scripting (XSS) vulnerability in the page…

LOW 25

WTCMS 1.0 contains a reflective cross-site scripting (XSS) vulnerability in the page management background which allows attackers to obtain cookies via a crafted payload entered into the search box.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00549 Published 2021-09-01 No fix listed CWE-79

TI-2020-13832 CVE-2020-20344 · GHSA-2qmj-w77m-fmvh

WTCMS 1.0 contains a reflective cross-site scripting (XSS) vulnerability in the keyword…

LOW 25

WTCMS 1.0 contains a reflective cross-site scripting (XSS) vulnerability in the keyword search function under the background articles module.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00503 Published 2021-09-01 No fix listed CWE-79

TI-2020-13831 CVE-2020-20343 · GHSA-q8fm-frxv-x679

WTCMS 1.0 contains a cross-site request forgery (CSRF) vulnerability in the…

LOW 29

WTCMS 1.0 contains a cross-site request forgery (CSRF) vulnerability in the index.php?g=admin&m=nav&a=add_post component that allows attackers to arbitrarily add articles in the administrator background.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00425 Published 2021-09-01 No fix listed CWE-352

TI-2019-12510 CVE-2019-16719 · GHSA-5h5p-q43p-7g65

WTCMS 1.0 allows index.php?g=admin&m=index&a=index CSRF with resultant XSS.

LOW 29

WTCMS 1.0 allows index.php?g=admin&m=index&a=index CSRF with resultant XSS.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00515 Published 2019-09-23 No fix listed CWE-352

TI-2019-06429 CVE-2019-8911 · GHSA-544p-2j3c-36wp

An issue was discovered in WTCMS 1.0.

LOW 29

An issue was discovered in WTCMS 1.0.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00826 Published 2019-02-18 No fix listed CWE-79

TI-2019-06428 CVE-2019-8910 · GHSA-hv6q-5c6p-rc6f

An issue was discovered in WTCMS 1.0.

LOW 39

An issue was discovered in WTCMS 1.0.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.00614 Published 2019-02-18 No fix listed CWE-352

TI-2019-06427 CVE-2019-8909 · GHSA-r6rv-m68g-fvjq

An issue was discovered in WTCMS 1.0.

LOW 36

An issue was discovered in WTCMS 1.0.

CVSS 3.0HIGH 7.5 Network No auth No interaction EPSS 0.01811 Published 2019-02-18 No fix listed CWE-400

TI-2019-06426 CVE-2019-8908 · GHSA-26gh-p63x-8w5r

An issue was discovered in WTCMS 1.0.

MEDIUM 46

An issue was discovered in WTCMS 1.0.

CVSS 3.0CRITICAL 9.8 Network No auth No interaction EPSS 0.02283 Published 2019-02-18 No fix listed CWE-706

TI-2018-07285 CVE-2018-10267 · GHSA-c33j-39g3-2wwh

WTCMS 1.0 has a CSRF vulnerability to add an administrator account via the index.php?admin&m=user&a=add_post URI.

LOW 39

WTCMS 1.0 has a CSRF vulnerability to add an administrator account via the index.php?admin&m=user&a=add_post URI.

CVSS 3.0HIGH 8.8 Network No auth User interaction EPSS 0.0052 Published 2018-04-21 No fix listed CWE-352

Vulnerabilities

Filters