Login Request a demo
TI
Product
Tianti
by Tianti Project · last CVE Sep 1, 2025
10
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Vulnerabilities10In the news0Timeline
Severity mix
Critical 0High 4Medium 6Low 0
Severity
All severities10Critical0High4Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Tianti to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-19110
6.5
1%
Nov 8
The skin-management feature in tianti 2.3 allows remote authenticated users to bypass intended permission restrictions by visiting tianti-module-admin/user/skin/list directly…
Affected: 2.3
CVE-2025-9795
5.4
0%
Sep 1
xujeff tianti 天梯 UploadController.java ajaxUploadFile unrestricted upload
Affected: through 2.3
CVE-2025-25908
5.4
0%
Mar 10
A stored cross-site scripting (XSS) vulnerability in tianti v2.3 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the coverImageURL…
Affected: 2.3
CVE-2018-19091
5.4
1%
Nov 7
tianti 2.3 has reflected XSS in the user management module via the tianti-module-admin/user/list userName parameter
Affected: 2.3
CVE-2018-19090
5.4
1%
Nov 7
tianti 2.3 has stored XSS in the article management module via an article title
Affected: 2.3
CVE-2018-19089
5.4
1%
Nov 7
tianti 2.3 has stored XSS in the userlist module via the tianti-module-admin/user/ajax/save_role name parameter, which is mishandled in…
Affected: 2.3
Showing 6