Approved changes feed: RSS · Atom

cpe:2.3:a:bosscms:bosscms:3.10.0:*:*:*:*:*:*:*

part: a version: 3.10.0 update: *

VendorBosscms (94c0230b-c2d1-5915-a9fc-744f20a6b32c)
ProductBosscms (4a4725a3-b50c-5d05-94d4-0fb57fb9e15d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-31613 vulnerable 2026-06-08 06:35:32.016055 Details available
BOSSCMS v3.10 is vulnerable to Cross Site Request Forgery (CSRF) in name="head_code" or name="foot_code."
Published: 2024-06-10T00:00:00.000Z
Updated: 2024-08-19T15:02:54.446Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-31609 vulnerable 2026-06-08 06:35:32.010847 Details available
Cross Site Scripting (XSS) vulnerability in BOSSCMS v3.10 allows attackers to run arbitrary code via the header code and footer code fields in code configuration.
Published: 2024-04-25T00:00:00.000Z
Updated: 2024-08-02T01:59:49.203Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.