CVE-2023-34654
MediumCVSS 6.1Exploitation Probability (EPSS)
Low risk35th percentile - higher than 35% of all known CVEs
Summary
Taocms versions up to 3.0.2 are vulnerable to Cross Site Scripting (XSS), allowing attackers to inject malicious code into the application.
Risk Assessment
Exploitation of this vulnerability could lead to user data theft or session hijacking, posing a significant security risk to the application and its users.
Recommendation
It is recommended to update Taocms to the latest version to mitigate this vulnerability and conduct a security audit of the application.
Other vulnerabilities in Taocms
See all- CVE-2022-36262Critical
An issue was discovered in taocms 3.0.2 in the website settings that allows arbitrary PHP code to be injected by modifying config.php.
- CVE-2022-25578Critical
A vulnerability in taocms v3.0.2 allows attackers to inject code by arbitrarily editing the .htaccess file. Attackers can modify this file to execute malicious commands on the server.
Original NVD description (English source)
taocms <=3.0.2 is vulnerable to Cross Site Scripting (XSS).