Approved changes feed: RSS · Atom

cpe:2.3:a:discuz:discuzx:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorDiscuz (0935b7c3-594c-5130-abae-96ba39e4073f)
ProductDiscuzx (48dd0bbd-193a-57b3-b0d3-3cf0bafc1f62)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:bitbucket/nsf-trc/discuzx purl2cpe 2026-06-01 10:16:40.912722
pkg:github/codersclub/discuzx purl2cpe 2026-06-01 10:16:40.912725
pkg:sourceforge/discuz31 purl2cpe 2026-06-01 10:16:40.912728

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-10298 vulnerable 2026-06-08 05:10:26.557352 Details available
Discuz! DiscuzX through X3.4 has reflected XSS via forum.php?mod=post&action=newthread because data/template/1_diy_portal_view.tpl.php does not restrict the content.
Published: 2018-04-22T15:00:00.000Z
Updated: 2024-09-16T18:49:41.535Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-10297 vulnerable 2026-06-08 05:10:26.556965 Details available
Discuz! DiscuzX through X3.4 has stored XSS via the portal.php?mod=portalcp&ac=article URI, related to mishandling of IMG elements associated with remote images.
Published: 2018-04-22T15:00:00.000Z
Updated: 2024-09-16T17:34:08.784Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.