Approved changes feed: RSS · Atom

cpe:2.3:a:decapcms:netlify_cms:2.10.192:*:*:*:*:*:*:*

part: a version: 2.10.192 update: *

VendorDecapcms (5efb9bb7-ff2c-5873-b863-80b2f513dda5)
ProductNetlify Cms (f3898e14-3051-5fed-9ba4-34eff3930534)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/decaporg/decap-cms purl2cpe 2026-06-01 10:16:00.930088
pkg:npm/decap-cms purl2cpe 2026-06-01 10:16:00.930091

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-38904 vulnerable 2026-06-08 06:08:19.109198 Details available
A Cross Site Scripting (XSS) vulnerability in Netlify CMS v.2.10.192 allows a remote attacker to execute arbitrary code via a crafted payload to the body parameter of the new post function.
Published: 2023-08-16T00:00:00.000Z
Updated: 2024-10-08T20:01:30.659Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.