Skip to content

Product

ThinuTech ThinuCMS vulnerabilities

3 published CVES affecting ThinuTech ThinuCMS, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
3
Critical
1
High
0
Medium
2
Low
0
Unscored
0
CISA KEV
0

Latest ThinuTech ThinuCMS CVEs

Newest publication first

  1. CVE-2023-3542 ThinuTech ThinuCMS contact.php cross site scripting

    Published
    MediumCVSS 6.1 EPSS 0.36%

    A vulnerability was found in ThinuTech ThinuCMS 1.5 and classified as problematic. Affected by this issue is some unknown functionality of the file /contact.php. The manipulation of the argument name/body leads to cross site scripting. The attack may be launched remotely. VDB-233...

  2. CVE-2023-3541 ThinuTech ThinuCMS author_posts.php cross site scripting

    Published
    MediumCVSS 6.1 EPSS 0.36%

    A vulnerability has been found in ThinuTech ThinuCMS 1.5 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /author_posts.php. The manipulation of the argument author with the input g6g12<script>alert(1)</script>o8sdm leads to cr...

  3. CVE-2023-3528 ThinuTech ThinuCMS category.php sql injection

    Published
    CriticalCVSS 9.8 EPSS 0.49%

    A vulnerability was found in ThinuTech ThinuCMS 1.5. It has been rated as critical. Affected by this issue is some unknown functionality of the file /category.php. The manipulation of the argument cat_id leads to sql injection. The attack may be launched remotely. The identifier...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.