Telaen Project: Security Vulnerabilities
Open Redirection Vulnerability in the redir.php script in Telaen before 1.3.1 allows remote attackers to redirect victims to arbitrary websites via a crafted URL.
CVSS Score
6.1
EPSS Score
0.102
Published
2020-02-03
Cross-site Scripting (XSS) in Telaen before 1.3.1 allows remote attackers to inject arbitrary web script or HTML via the "f_email" parameter in index.php.
CVSS Score
6.1
EPSS Score
0.026
Published
2020-02-03
Telean before 1.3.1 contains a full path disclosure vulnerability which could allow remote attackers to obtain sensitive information through a specially crafted URL request.
CVSS Score
5.3
EPSS Score
0.094
Published
2020-02-03