VendorsTeaCMS Projectteacmsall versions
Vulnerabilities

TeaCMS Project TeaCMS

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

6CVEs
CVE-2023-1483
XiaoBingBy TeaCMS getallarticleinfo sql injection
Published 2023-03-18 · Modified
9.8EPSS 0.006
CVE-2023-1398
XiaoBingBy TeaCMS upload path traversal
Published 2023-03-14 · Modified
8.8EPSS 0.010
CVE-2023-27091
An unauthorized access issue found in XiaoBingby TeaCMS 2.3.3 allows attackers to escalate privileges via the id and keywords parameter(s).
Published 2023-04-04 · Modified
7.2EPSS 0.007
CVE-2023-1616
XiaoBingBy TeaCMS Article Title cross site scripting
Published 2023-03-24 · Modified
5.4EPSS 0.005
CVE-2023-27090
Cross Site Scripting vulnerability found in TeaCMS storage allows attacker to cause a leak of sensitive information via the article title parameter.
Published 2023-04-20 · Modified
5.4EPSS 0.004
CVE-2025-5033
XiaoBingby TeaCMS addUser cross-site request forgery
Published 2025-05-21 · Analyzed
5.3EPSS 0.003