Approved changes feed: RSS · Atom

cpe:2.3:a:moderncampus:omni_cms:2023.1:*:*:*:*:*:*:*

part: a version: 2023.1 update: *

VendorModerncampus (cc6b8872-1afa-541f-a0bb-8ed5ff62f04e)
ProductOmni Cms (6172d44f-4f4c-5d6c-987f-d2249aa345de)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-35860 vulnerable 2026-06-08 06:06:27.920653 Details available
A Directory Traversal vulnerability in Modern Campus - Omni CMS 2023.1 allows a remote, unauthenticated attacker to enumerate file system information via the dir parameter to listing.php or rss.php.
Published: 2024-06-13T00:00:00.000Z
Updated: 2024-08-02T16:30:45.375Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35859 vulnerable 2026-06-08 06:06:27.920311 Details available
A Reflected Cross-Site Scripting (XSS) vulnerability in the blog function of Modern Campus - Omni CMS 2023.1 allows a remote attacker to inject arbitrary scripts or HTML via multiple parameters.
Published: 2024-06-13T00:00:00.000Z
Updated: 2025-03-17T18:39:42.475Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-35858 vulnerable 2026-06-08 06:06:27.919842 Details available
XPath Injection vulnerabilities in the blog and RSS functions of Modern Campus - Omni CMS 2023.1 allow a remote, unauthenticated attacker to obtain application information.
Published: 2024-06-13T00:00:00.000Z
Updated: 2024-08-02T16:30:45.365Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.