Teamwork Management System Project: Security Vulnerabilities
Cross Site Scripting (XSS) vulnerability in xiweicheng TMS v.2.28.0 allows a remote attacker to execute arbitrary code via a crafted script to the click here function.
CVSS Score
6.1
EPSS Score
0.002
Published
2024-01-04
TMS v2.28.0 contains an insecure permissions vulnerability via the component /TMS/admin/user/Update2. This vulnerability allows attackers to modify the administrator account and password.
CVSS Score
5.9
EPSS Score
0.001
Published
2022-03-20