GCVE - cpe:2.3:a:naviwebs:navigate_cms:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:naviwebs:navigate_cms:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Naviwebs (`118bae96-31c7-5625-9ef7-bd28722d99eb`)
Product	Navigate Cms (`3b8ebbd3-1809-5bed-abe2-d2e316c61c71`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/navigatecms/navigate-cms`	purl2cpe	2026-06-01 10:11:18.855283
`pkg:sourceforge/navigatecms`	purl2cpe	2026-06-01 10:11:18.855286

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-13798`	vulnerable	2026-06-08 05:18:01.100876	Details available An issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify calls in lib/packages/feeds/feed.class.php. Published: 2020-06-03T21:48:43.000Z Updated: 2024-08-04T12:25:16.632Z Open on db.gcve.eu Reference links https://github.com/NavigateCMS/Navigate-CMS/commit/e690bb5d7bbe9df9052b13c403ca0ac5e58054d4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-13797`	vulnerable	2026-06-08 05:18:01.100594	Details available An issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify calls in lib/packages/websites/website.class.php. Published: 2020-06-03T21:48:53.000Z Updated: 2024-08-04T12:25:16.567Z Open on db.gcve.eu Reference links https://github.com/NavigateCMS/Navigate-CMS/commit/e690bb5d7bbe9df9052b13c403ca0ac5e58054d4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-13796`	vulnerable	2026-06-08 05:18:01.100291	Details available An issue was discovered in Navigate CMS through 2.8.7. It allows XSS because of a lack of purify calls in lib/packages/structure/structure.class.php. Published: 2020-06-03T21:49:01.000Z Updated: 2024-08-04T12:25:16.502Z Open on db.gcve.eu Reference links https://github.com/NavigateCMS/Navigate-CMS/commit/e690bb5d7bbe9df9052b13c403ca0ac5e58054d4	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-13795`	vulnerable	2026-06-08 05:18:01.099887	Details available An issue was discovered in Navigate CMS through 2.8.7. It allows Directory Traversal because lib/packages/templates/template.class.php mishandles ../ and ..\ substrings. Published: 2020-06-03T21:49:16.000Z Updated: 2024-08-04T12:25:16.549Z Open on db.gcve.eu Reference links https://github.com/NavigateCMS/Navigate-CMS/commit/88b41c7665ac7181be063b7a541dded7b207d9e7 http://packetstormsecurity.com/files/157940/Navigate-CMS-2.8.7-Directory-Traversal.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.