Approved changes feed: RSS · Atom

cpe:2.3:a:boidcms:boidcms:2.0.0:*:*:*:*:*:*:*

part: a version: 2.0.0 update: *

VendorBoidcms (41b32f61-6a5b-525d-a940-568c9bb02a07)
ProductBoidcms (2a2ff4f8-7ebb-51b5-99c9-fa2d097589c2)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/boidcms/boidcms purl2cpe 2026-06-01 10:12:34.182115

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-32343 vulnerable 2026-06-08 06:35:33.065313 Details available
A cross-site scripting (XSS) vulnerability in the Create Page of Boid CMS v2.1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Content parameter.
Published: 2024-04-17T00:00:00.000Z
Updated: 2024-08-02T02:06:44.052Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-38836 vulnerable 2026-06-08 06:08:18.874029 Details available
File Upload vulnerability in BoidCMS v.2.0.0 allows a remote attacker to execute arbitrary code by adding a GIF header to bypass MIME type checks.
Published: 2023-08-21T00:00:00.000Z
Updated: 2026-07-09T00:27:08.679Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.