Advisories · Technology

XiaoBingby TeaCMS.

Every CVE that names XiaoBingby TeaCMS among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2025-5033 CVE record

CVSS 5.3 Medium

XiaoBingby TeaCMS addUser cross-site request forgery
- XiaoBingby TeaCMS
- Cross-site request forgery (CSRF)
- Broken access control
Not analysed yet 21 May 2025
CVE-2023-1616 CVE record

CVSS 3.5 Low

XiaoBingBy TeaCMS Article Title cross site scripting
- XiaoBingBy TeaCMS
- Cross-site scripting (XSS)
Not analysed yet 24 Mar 2023
CVE-2023-1483 CVE record

CVSS 6.3 Medium

XiaoBingBy TeaCMS getallarticleinfo sql injection
- XiaoBingBy TeaCMS
- SQL injection
Not analysed yet 18 Mar 2023
CVE-2023-1398 CVE record

CVSS 6.3 Medium

XiaoBingBy TeaCMS upload path traversal
- XiaoBingBy TeaCMS
- Path traversal
Not analysed yet 14 Mar 2023