CVE-2020-23050: Taotesting Tao Assessment Platform

High severity, CVSS 8.0. EPSS: 1.2% chance of exploitation in the next 30 days.

TAO Open Source Assessment Platform v3.3.0 RC02 was discovered to contain a HTML injection vulnerability in the userFirstName parameter of the user account input field. This vulnerability allows attackers to execute phishing attacks, external redirects, and arbitrary code.

Affected products

• Taotesting Tao Assessment Platform: version 3.3.0 only

Published 2021-10-22. Last modified 2026-06-17.