CVE-2024-7900

A vulnerability, which was classified as problematic, was found in xiaohe4966 TpMeCMS 1.3.3.2. Affected is an unknown function of the file /h.php/general/config?ref=addtabs of the component Basic Configuration Handler. The manipulation of the argument Site Name/Beian/Contact address/copyright/technical support leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.

• CWE-79

• https://github.com/DeepMountains/Mirage/blob/main/CVE16-1.mdExploit, Third Party Advisory
• https://github.com/DeepMountains/Mirage/blob/main/CVE16-2.mdExploit, Third Party Advisory
• https://vuldb.com/?ctiid.274908Permissions Required, Third Party Advisory, VDB Entry
• https://vuldb.com/?id.274908Third Party Advisory, VDB Entry
• https://vuldb.com/?submit.387382Third Party Advisory, VDB Entry

Published

Aug 17, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-7894The If Menu plugin for WordPress is vulnerable to unauthoriz…5.3
• CVE-2024-7895The Beaver Builder – WordPress Page Builder plugin for WordP…5.4
• CVE-2024-7896A vulnerability was found in Tosei Online Store Management S…8.8
• CVE-2024-7897A vulnerability classified as critical has been found in Tos…8.8
• CVE-2024-7898A vulnerability classified as critical was found in Tosei On…9.8
• CVE-2024-7899A vulnerability, which was classified as critical, has been …7.2
• CVE-2024-7901A vulnerability has been found in Scada-LTS 2.7.8 and classi…5.4
• CVE-2024-7902A vulnerability was found in pkp ojs up to 3.4.0-6 and class…6.1
• CVE-2024-7903A vulnerability was found in DedeBIZ 6.3.0. It has been decl…8.8
• CVE-2024-7904A vulnerability was found in DedeBIZ 6.3.0. It has been rate…8.8
• CVE-2024-7905A vulnerability classified as critical has been found in Ded…7.2
• CVE-2024-7906A vulnerability classified as critical was found in DedeBIZ …8.8