Approved changes feed: RSS · Atom

cpe:2.3:a:bitrix:site_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBitrix (b8068dd0-344d-5795-a796-3d2bbcc5e7e6)
ProductSite Manager (b371cc6a-8314-58d7-9f0d-f6aee82775bd)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-20122 vulnerable 2026-06-08 05:09:23.309305 Bitrix Site Manager Contact Form cross site scripting
LOW (3.5)
A vulnerability classified as problematic was found in Bitrix Site Manager 12.06.2015. Affected by this vulnerability is an unknown functionality of the component Contact Form. The manipulation of the argument text with the input <img src="http://1"; on onerror="$(’p').text(’Hacked’)" /> leads to basic cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2022-06-30T05:05:22.000Z
Updated: 2025-04-15T14:08:44.945Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.