Approved changes feed: RSS · Atom

cpe:2.3:a:template_cms_project:template_cms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorTemplate Cms Project (d9d1ecc1-0085-58d9-9cbe-bf8e7298186d)
ProductTemplate Cms (71fc1b77-c217-5bf3-84a8-df292559e668)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/template-cms/template-cms-plugins purl2cpe 2026-06-01 10:14:54.845601

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-4902 vulnerable 2026-06-08 05:02:53.167242 Details available
Multiple cross-site request forgery (CSRF) vulnerabilities in Template CMS 2.1.1 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) create an administrator user via an add action to admin/index.php or (2) conduct static PHP code injection attacks via the themes_editor parameter in an edit_template action to admin/index.php.
Published: 2015-05-20T19:00:00.000Z
Updated: 2024-08-06T20:50:17.900Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2012-4901 vulnerable 2026-06-08 05:02:53.166820 Details available
Cross-site scripting (XSS) vulnerability in Template CMS 2.1.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the themes_editor parameter in an add_template action to admin/index.php.
Published: 2015-05-20T19:00:00.000Z
Updated: 2024-08-06T20:50:17.978Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.