Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:hkcms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductHkcms (e8080b0b-d5f9-5dae-ba1a-aafd6c693cb3)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-5013 vulnerable 2026-06-08 07:35:23.914160 HkCms Search index.html cross site scripting
MEDIUM (4.3)
A vulnerability, which was classified as problematic, was found in HkCms up to 2.3.2.240702. This affects an unknown part of the file /index.php/search/index.html of the component Search. The manipulation of the argument keyword leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-21T00:31:23.395Z
Updated: 2025-05-21T22:13:41.928Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-1482 vulnerable 2026-06-08 05:52:35.985799 HkCms External Plugin code injection
MEDIUM (4.7)
A vulnerability, which was classified as problematic, was found in HkCms 2.2.4.230206. This affects an unknown part of the file /admin.php/appcenter/local.html?type=addon of the component External Plugin Handler. The manipulation leads to code injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-223365 was assigned to this vulnerability.
Published: 2023-03-18T09:31:03.575Z
Updated: 2025-02-26T17:16:47.300Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.