Wbce Wbce Cms 1.5.4
Approved changes feed: RSS · Atom
cpe:2.3:a:wbce:wbce_cms:1.5.4:*:*:*:*:*:*:*
part: a version: 1.5.4 update: *
| Vendor | Wbce (25505168-e398-58ca-86f3-dca0bfe1c6dd) |
|---|---|
| Product | Wbce Cms (be0de863-786f-5eb8-be3f-b5bc8eef8102) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/wbce/wbce_cms |
purl2cpe | 2026-06-01 10:11:03.086397 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-46020 |
vulnerable | 2026-06-08 05:50:37.670249 |
Details available
WBCE CMS v1.5.4 can implement getshell by modifying the upload file type.
Published: 2022-12-20T00:00:00.000Z
Updated: 2025-04-17T13:36:09.240Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45040 |
vulnerable | 2026-06-08 05:50:35.110729 |
Details available
A cross-site scripting (XSS) vulnerability in /admin/pages/sections_save.php of WBCE CMS v1.5.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name Section field.
Published: 2022-11-25T00:00:00.000Z
Updated: 2025-04-25T19:07:03.974Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45039 |
vulnerable | 2026-06-08 05:50:35.110323 |
Details available
An arbitrary file upload vulnerability in the Server Settings module of WBCE CMS v1.5.4 allows attackers to execute arbitrary code via a crafted PHP file.
Published: 2022-11-25T00:00:00.000Z
Updated: 2025-04-25T19:01:03.143Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45038 |
vulnerable | 2026-06-08 05:50:35.109817 |
Details available
A cross-site scripting (XSS) vulnerability in /admin/settings/save.php of WBCE CMS v1.5.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Website Footer field.
Published: 2022-11-25T00:00:00.000Z
Updated: 2025-04-25T18:57:39.308Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45037 |
vulnerable | 2026-06-08 05:50:35.109283 |
Details available
A cross-site scripting (XSS) vulnerability in /admin/users/index.php of WBCE CMS v1.5.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Display Name field.
Published: 2022-11-25T00:00:00.000Z
Updated: 2025-04-25T18:48:50.633Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45036 |
vulnerable | 2026-06-08 05:50:35.108475 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.