VendorsTaotestingtao_assessment_platformall versions
Vulnerabilities

Taotesting TAO Open Source Assessment Platform 3.3.0 Release Candidate 02

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2020-23050
TAO Open Source Assessment Platform v3.3.0 RC02 was discovered to contain a HTML injection vulnerability in the userFirstName parameter of the user account input field. This vulnerability allows attackers to execute phishing attacks, external redirects, and arbitrary code.
Published 2021-10-22 · Modified
8.0EPSS 0.012
CVE-2020-36499
TAO Open Source Assessment Platform v3.3.0 RC02 was discovered to contain a cross-site scripting (XSS) vulnerability in the content parameter of the Rubric Block (Add) module. This vulnerability allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the rubric name value.
Published 2021-10-22 · Modified
5.4EPSS 0.006