Approved changes feed: RSS · Atom

cpe:2.3:a:gpeasy:gpeasy_cms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGpeasy (b2d8b17a-27ea-50e2-be07-fd348a0926b0)
ProductGpeasy Cms (6f58ce2d-eecf-57bc-a388-89ca514097e8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/dccafe/gpeasy-cms purl2cpe 2026-06-01 10:15:34.045289
pkg:github/typesetter/typesetter purl2cpe 2026-06-01 10:15:34.045292

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-0807 vulnerable 2026-06-08 05:03:50.226727 Details available
Cross-site scripting (XSS) vulnerability in the NewSectionPrompt function in include/tool/editing_page.php in gpEasy CMS 3.5.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the section parameter in a new_section action to index.php.
Published: 2014-03-28T15:00:00.000Z
Updated: 2024-08-06T14:41:47.138Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2010-2039 vulnerable 2026-06-08 04:54:11.324676 Details available
Cross-site request forgery (CSRF) vulnerability in gpEasy CMS 1.6.2, 1.6.1, and earlier allows remote attackers to hijack the authentication of administrators for requests that create new administrative users via an Admin_Users action to index.php. NOTE: some of these details are obtained from third party information.
Published: 2010-05-25T14:00:00.000Z
Updated: 2024-08-07T02:17:13.621Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.