Taosir vulnerabilities
We track 3 vulnerabilities in Taosir products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on November 30, 2025.
Latest Taosir vulnerabilities
- 9.8 Critical severity
WTCMS: Improper Control of Generation of Code
A vulnerability was detected in taosir WTCMS up to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665. Impacted is the function fetch of the file /index.php. Performing manipulation of the argument content results in code injection. It is possible to initiate the attack
- 9.8 Critical severity
WTCMS: Improper Neutralization of Special Elements used in an SQL Command
A security flaw has been discovered in taosir WTCMS up to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665. This affects the function check/uncheck/delete of the file application/Comment/Controller/CommentadminController.class.php of the component CommentadminControll
- 9.8 Critical severity
WTCMS: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability was identified in taosir WTCMS up to 01a5f68a3dfc2fdddb44eed967bb2d4f60487665. Affected by this issue is the function delete of the file application/Admin/Controller/SlideController.class.php of the component SlideController. The manipulation o