Vulnerabilities (CVE)

Filtered by vendor Taogogo Subscribe
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2021-44969 1 Taogogo 1 Taocms 2022-02-16 3.5 LOW 4.8 MEDIUM
Taocms v3.0.2 was discovered to contain a cross-site scripting (XSS) vulnerability via the Management Column component.
CVE-2021-44983 1 Taogogo 1 Taocms 2022-02-08 4.0 MEDIUM 4.9 MEDIUM
In taocms 3.0.1 after logging in to the background, there is an Arbitrary file download vulnerability at the File Management column.
CVE-2022-23316 1 Taogogo 1 Taocms 2022-02-08 4.0 MEDIUM 4.9 MEDIUM
An issue was discovered in taoCMS v3.0.2. There is an arbitrary file read vulnerability that can read any files via admin.php?action=file&ctrl=download&path=../../1.txt.
CVE-2021-46203 1 Taogogo 1 Taocms 2022-01-25 4.0 MEDIUM 6.5 MEDIUM
Taocms v3.0.2 was discovered to contain an arbitrary file read vulnerability via the path parameter.
CVE-2021-25785 1 Taogogo 1 Taocms 2021-12-03 3.5 LOW 4.8 MEDIUM
Taocms v2.5Beta5 was discovered to contain a cross-site scripting (XSS) vulnerability via the component Management column.