Approved changes feed: RSS · Atom

cpe:2.3:a:bloofoxcms:bloofoxcms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBloofoxcms (b491cdc9-1555-5741-9e50-e5d6c88d39c5)
ProductBloofoxcms (ea5acbe2-3b50-5e35-bc72-6d5169dc8917)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/alexlang24/bloofoxcms purl2cpe 2026-06-01 10:11:24.229754

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-47906 vulnerable 2026-06-08 05:38:07.876842 BloofoxCMS 0.5.2.1 - 'text' Stored Cross Site Scripting
MEDIUM (6.4)
BloofoxCMS 0.5.2.1 contains a stored cross-site scripting vulnerability in the articles text parameter that allows authenticated attackers to inject malicious scripts. Attackers can insert malicious javascript payloads in the text field to execute scripts and potentially steal authenticated users' cookies.
Published: 2026-01-23T16:47:44.644Z
Updated: 2026-03-05T01:29:13.068Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.