Browse all 4 CVE security advisories affecting XiaoBingBy. AI-powered Chinese analysis, POCs, and references for each vulnerability.
XiaoBingBy is a Chinese search engine and AI assistant that provides web search, voice interaction, and chatbot services. Historically, it has been associated with vulnerabilities including remote code execution, cross-site scripting, and privilege escalation flaws. The platform has faced scrutiny for data privacy concerns and alleged content censorship practices. With four CVEs recorded, XiaoBingBy's security posture has shown vulnerabilities in its web interface and API endpoints that could allow unauthorized access or data exfiltration. The service continues to evolve its security measures to address these findings while expanding its AI capabilities and user base across multiple platforms.
| CVE ID | Title | CVSS | Severity | Published |
|---|---|---|---|---|
| CVE-2025-5033 | XiaoBingby TeaCMS addUser cross-site request forgery — TeaCMSCWE-352 | 4.3 | Medium | 2025-05-21 |
| CVE-2023-1616 | XiaoBingBy TeaCMS Article Title cross site scripting — TeaCMSCWE-79 | 3.5 | Low | 2023-03-24 |
| CVE-2023-1483 | XiaoBingBy TeaCMS getallarticleinfo sql injection — TeaCMSCWE-89 | 6.3 | Medium | 2023-03-18 |
| CVE-2023-1398 | XiaoBingBy TeaCMS upload path traversal — TeaCMSCWE-24 | 6.3 | Medium | 2023-03-14 |
This page lists every published CVE security advisory associated with XiaoBingBy. Each entry links to a detailed page with CVSS scoring, CWE classification, affected products and references. AI-generated Chinese analysis is provided for fast triage.