Approved changes feed: RSS · Atom

cpe:2.3:a:xjd2020:fastcms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorXjd2020 (c1076a21-657b-58a4-93bd-801e8ee423ed)
ProductFastcms (35887c1b-8d49-5b54-b0e3-d2008fdc13f7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/my-fastcms/fastcms purl2cpe 2026-06-01 10:13:23.318227

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-26682 vulnerable 2026-06-08 07:53:21.656048 Details available
An issue in fastCMS before v.0.1.6 allows a local attacker to execute arbitrary code via the PluginController.java component
Published: 2026-02-26T00:00:00.000Z
Updated: 2026-02-26T18:53:00.554Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-2593 vulnerable 2026-06-08 07:16:57.623445 FastCMS list sql injection
MEDIUM (6.3)
A vulnerability has been found in FastCMS up to 0.1.5 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /api/client/article/list. The manipulation of the argument orderBy leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-03-21T14:31:04.784Z
Updated: 2025-03-21T15:19:01.984Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-1332 vulnerable 2026-06-08 07:08:36.400258 FastCMS Template Menu menu cross site scripting
LOW (2.4)
A vulnerability has been found in FastCMS up to 0.1.5 and classified as problematic. This vulnerability affects unknown code of the file /fastcms.html#/template/menu of the component Template Menu. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. Continious delivery with rolling releases is used by this product. Therefore, no version details of affected nor updated releases are available.
Published: 2025-02-16T00:31:08.897Z
Updated: 2025-02-18T21:31:50.636Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-7733 vulnerable 2026-06-08 06:58:23.309862 FastCMS New Article Category Page cross site scripting
LOW (3.5)
A vulnerability, which was classified as problematic, was found in FastCMS up to 0.1.5. Affected is an unknown function of the component New Article Category Page. The manipulation leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2024-08-13T18:00:11.066Z
Updated: 2024-08-13T18:44:31.529Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1111 vulnerable 2026-06-08 05:52:33.906471 FastCMS New Article Tab cross site scripting
LOW (2.4)
A vulnerability was found in FastCMS up to 0.1.5 and classified as problematic. Affected by this issue is some unknown functionality of the component New Article Tab. The manipulation of the argument Title leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-266126 is the identifier assigned to this vulnerability.
Published: 2024-05-24T06:31:07.931Z
Updated: 2024-08-02T05:32:46.371Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.