Skip to contentTianti Project Tianti vulnerabilities
- tianti project tianti, xujeff tianti 天梯 +1 morexujeff tianti 天梯 UploadController.java ajaxUploadFile unrestricted uploadCVE-2025-97955.3 Medium
- tianti project tianti, xujeff tianti 天梯 +1 morexujeff tianti 天梯 save authorizationCVE-2025-88075.3 Medium
- tianti project tiantitianti v2.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /user...CVE-2025-279108.0 High
- tianti project tiantiA stored cross-site scripting (XSS) vulnerability in tianti v2.3 allows attackers to execute...CVE-2025-259085.4 Medium
- tianti project tiantitianti v2.3 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component /user...CVE-2025-259078.8 High
- tianti project tiantiThe skin-management feature in tianti 2.3 allows remote authenticated users to bypass intended...CVE-2018-191106.5 Medium
- tianti project tiantitianti 2.3 allows remote authenticated users to bypass intended permission restrictions by...CVE-2018-191098.8 High
- tianti project tiantitianti 2.3 has reflected XSS in the user management module via the tianti-module-admin/user/list...CVE-2018-190915.4 Medium
- tianti project tiantitianti 2.3 has stored XSS in the article management module via an article title.CVE-2018-190905.4 Medium
- tianti project tiantitianti 2.3 has stored XSS in the userlist module via the tianti-module-admin/user/ajax/save_role...CVE-2018-190895.4 Medium