Tadjmen

2 exploits Active since Mar 2021
CVE-2021-27885 EXPLOITDB HIGH text WORKING POC
e107 < 2.3.0 - Cross-Site Request Forgery via usersettings.php
usersettings.php in e107 through 2.3.0 lacks a certain e_TOKEN protection mechanism.
CVSS 8.8
EIP-2026-105413 EXPLOITDB text WORKING POC
Batflat CMS 1.3.6 - 'multiple' Stored XSS