Pppioo

**Name of the Vulnerable Software and Affected Versions** taogogo taoCMS version 2.5 beta5.1 **Description** The issue allows a remote attacker to execute arbitrary code via the `name` field in "admin.php". This is a Cross Site Scripting vulnerability. **Recommendations** For version 2.5 beta5.1, as a temporary workaround, consider restricting access to the `name` field in the "admin.php" endpoint until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Name of the Vulnerable Software and Affected Versions: Maccms version 10 Description: A Cross-Site Request Forgery (CSRF) issue in the component "admin.php/admin/type/info.html" allows attackers to gain administrator privileges. Recommendations: For Maccms version 10, consider disabling access to the "admin.php/admin/type/info.html" component until a patch is available to prevent exploitation of the CSRF issue.

Name of the Vulnerable Software and Affected Versions: Maccms version 10 Description: A cross-site scripting (XSS) vulnerability in the `type en` parameter allows attackers to obtain the administrator cookie and escalate privileges via a crafted payload. Recommendations: For Maccms version 10, consider restricting access to the `type en` parameter to minimize the risk of exploitation until a patch is available.