All packages
ThinuTech ThinuCMS 1.5 vulnerabilities
3 known CVE vulnerabilities in ThinuTech ThinuCMS 1.5, translated and rated.
- CVE-2023-3542Low
A vulnerability was found in ThinuTech ThinuCMS version 1.5 that allows cross site scripting (XSS) attacks through manipulation of arguments in the /contact.php file.
- CVE-2023-3541Low
A vulnerability has been found in ThinuTech ThinuCMS version 1.5 that allows cross-site scripting (XSS) attacks through manipulation of the 'author' argument in the /author_posts.php file. Injecting malicious scripts can lead to unauthorized code execution in users' browsers.
- CVE-2023-3528Medium
A critical vulnerability was found in ThinuTech ThinuCMS version 1.5. Manipulation of the cat_id argument in the /category.php file leads to SQL injection, which can be exploited remotely.