Approved changes feed: RSS · Atom

cpe:2.3:a:unknown:system_dashboard:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnknown (668ca391-a6cc-5e33-879b-83885214de33)
ProductSystem Dashboard (f1b0dd4d-9d66-53f7-9626-18dc3e291f09)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-11107 vulnerable 2026-06-08 06:23:48.758027 System Dashboard < 2.8.15 - Unauthenticated Stored XSS
The System Dashboard WordPress plugin before 2.8.15 does not sanitise and escape some parameters when outputting them in the page, which could allow unauthenticated users to perform Cross-Site Scripting attacks.
Published: 2024-12-10T06:00:02.187Z
Updated: 2024-12-10T15:15:07.287Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-10708 vulnerable 2026-06-08 06:23:47.327226 System Dashboard < 2.8.15 - Admin+ Path Traversal
The System Dashboard WordPress plugin before 2.8.15 does not validate user input used in a path, which could allow high privilege users such as admin to perform path traversal attacks an read arbitrary files on the server
Published: 2024-12-10T06:00:01.931Z
Updated: 2024-12-10T15:27:29.260Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-7246 vulnerable 2026-06-08 06:21:57.398909 System Dashboard < 2.8.10 - XSS via Header Injection
The System Dashboard WordPress plugin before 2.8.10 does not sanitize and escape some parameters, which could allow administrators in multisite WordPress configurations to perform Cross-Site Scripting attacks
Published: 2024-03-20T05:00:02.302Z
Updated: 2024-08-05T15:32:24.317Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.