Approved changes feed: RSS · Atom

cpe:2.3:a:generator-hottowel_project:generator-hottowel:0.0.11:*:*:*:*:node.js:*:*

part: a version: 0.0.11 update: *

VendorGenerator Hottowel Project (0ea9ec59-03f0-5b61-b93f-004af04bcf21)
ProductGenerator Hottowel (dabc2d17-f594-598d-9fda-1760bb9702b0)
Edition*
Language*
Software edition*
Target softwarenode.js
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/johnpapa/generator-hottowel purl2cpe 2026-06-01 10:18:21.730871
pkg:npm/generator-hottowel purl2cpe 2026-06-01 10:18:21.730875

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-15025 vulnerable 2026-06-08 05:07:26.216191 generator-hottowel 404 Error _app.js cross site scripting
LOW (3.5)
A vulnerability, which was classified as problematic, was found in generator-hottowel 0.0.11. Affected is an unknown function of the file app/templates/src/server/_app.js of the component 404 Error Handler. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The name of the patch is c17092fd4103143a9ddab93c8983ace8bf174396. It is recommended to apply a patch to fix this issue. The identifier of this vulnerability is VDB-221484.
Published: 2023-02-20T09:31:04.566Z
Updated: 2024-08-06T03:47:34.757Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.