TI
Product
Tianti
10
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 6Low 0
Watch
Add Tianti to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2025-8807 | 8.8 | Aug 10 | xujeff tianti 天梯 save authorization Affected: through 2.3 |
| CVE-2025-25907 | 8.8 | Mar 10 | tianti v2.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /user/ajax/save Affected: 2.3 |
| CVE-2018-19109 | 8.8 | Nov 8 | tianti 2.3 allows remote authenticated users to bypass intended permission restrictions by visiting tianti-module-admin/cms/column/list directly to read the column list page or… Affected: 2.3 |
| CVE-2025-27910 | 8.0 | Mar 10 | tianti v2.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /user/ajax/upd/status Affected: 2.3 |
| CVE-2018-19110 | 6.5 | Nov 8 | The skin-management feature in tianti 2.3 allows remote authenticated users to bypass intended permission restrictions by visiting tianti-module-admin/user/skin/list directly… Affected: 2.3 |
| CVE-2025-9795 | 5.4 | Sep 1 | xujeff tianti 天梯 UploadController.java ajaxUploadFile unrestricted upload Affected: through 2.3 |
| CVE-2025-25908 | 5.4 | Mar 10 | A stored cross-site scripting (XSS) vulnerability in tianti v2.3 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the coverImageURL… Affected: 2.3 |
| CVE-2018-19091 | 5.4 | Nov 7 | tianti 2.3 has reflected XSS in the user management module via the tianti-module-admin/user/list userName parameter Affected: 2.3 |
| CVE-2018-19090 | 5.4 | Nov 7 | tianti 2.3 has stored XSS in the article management module via an article title Affected: 2.3 |
| CVE-2018-19089 | 5.4 | Nov 7 | tianti 2.3 has stored XSS in the userlist module via the tianti-module-admin/user/ajax/save_role name parameter, which is mishandled in… Affected: 2.3 |
Showing 10