Approved changes feed: RSS · Atom

cpe:2.3:a:anchor:anchor_cms:0.9.1:*:*:*:*:*:*:*

part: a version: 0.9.1 update: *

VendorAnchor (a7af1bbe-55dd-5bd6-b0ba-505ab884d751)
ProductAnchor Cms (42a403d6-b1e2-5489-ac81-9f3c28d3fdb3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/anchorcms/anchor-cms purl2cpe 2026-06-01 10:16:02.669363

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-5099 vulnerable 2026-06-08 05:04:50.776830 Details available
Cross-site scripting (XSS) vulnerability in article.php in Anchor CMS 0.9.1, when comments are enabled, allows remote attackers to inject arbitrary web script or HTML via the Name field. NOTE: some sources have reported that comments.php is vulnerable, but certain functions from comments.php are used by article.php.
Published: 2013-08-09T21:00:00.000Z
Updated: 2024-08-06T16:59:41.247Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.