CVE-2023-34654

35th percentile - higher than 35% of all known CVEs

Taocms versions up to 3.0.2 are vulnerable to Cross Site Scripting (XSS), allowing attackers to inject malicious code into the application.

Exploitation of this vulnerability could lead to user data theft or session hijacking, posing a significant security risk to the application and its users.

It is recommended to update Taocms to the latest version to mitigate this vulnerability and conduct a security audit of the application.