Tp5cms Project Tp5cms — known CVE vulnerabilities

Every CVE whose affected-product data names Tp5cms Project Tp5cms, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2018-19692 — CVSS 9.8 (critical): An issue was discovered in tp5cms through 2017-05-25. admin.php/upload/picture.html allows remote attackers to execute arbitrary PHP code…
• CVE-2018-15568 — CVSS 8.8 (high): tp5cms through 2017-05-25 has CSRF via admin.php/category/delete.html.
• CVE-2018-15566 — CVSS 6.1 (medium): tp5cms through 2017-05-25 has XSS via the admin.php/article/index.html q parameter.
• CVE-2018-19693 — CVSS 6.1 (medium): An issue was discovered in tp5cms through 2017-05-25. admin.php/system/set.html has XSS via the title parameter.
• CVE-2021-31280 — CVSS 6.1 (medium): An issue was discovered in tp5cms through 2017-05-25. admin.php/system/set.html has XSS via the keywords parameter.