Approved changes feed: RSS · Atom
cpe:2.3:a:techhub.p-m:decap_cms:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Techhub.P M (7fe4167d-6cdf-5f7b-9e40-37f1a4e99680) |
|---|---|
| Product | Decap Cms (cc7f0ddd-1cdb-57c6-b141-302ee64c38d5) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from purl2cpe mapping
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/decaporg/decap-cms |
purl2cpe | 2026-06-01 10:16:13.763117 |
pkg:npm/decap-cms |
purl2cpe | 2026-06-01 10:16:13.763121 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-57520 |
vulnerable | 2026-06-08 07:33:15.936049 |
Details available
A Cross Site Scripting (XSS) vulnerability exists in Decap CMS thru 3.8.3. Input fields such as body, tags, title, and description are not properly sanitized before being rendered in the content preview pane. This enables an attacker to inject arbitrary JavaScript which executes whenever a user views the preview panel. The vulnerability affects multiple input vectors and does not require user interaction beyond viewing the affected content.
Published: 2025-09-10T00:00:00.000Z
Updated: 2025-09-11T18:26:06.358Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.