Approved changes feed: RSS · Atom
cpe:2.3:a:exe-system:notescms:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Exe System (39f049ec-55a0-55c9-8bfc-cd95a23a8691) |
|---|---|
| Product | Notescms (21eb8016-c22f-5e46-891e-0443e8b4d465) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-52037 |
vulnerable | 2026-06-08 07:31:11.341388 |
Details available
A vulnerability has been found in NotesCMS and classified as medium. Affected by this vulnerability is the page /index.php?route=sites. The manipulation of the title of the service descriptions leads to a stored XSS vulnerability. The issue was confirmed to be present in the source code as of commit 7d821a0f028b0778b245b99ab3d3bff1ac10e2d3 (dated 2024-05-08), and was fixed in commit 95322c5121dbd7070f3bd54f2848079654a0a8ea (dated 2025-03-31). The attack can be launched remotely. CWE Definition of the Vulnerability: CWE-79.
Published: 2025-08-26T00:00:00.000Z
Updated: 2025-08-26T15:25:01.777Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52036 |
vulnerable | 2026-06-08 07:31:11.340990 |
Details available
A vulnerability has been found in NotesCMS and classified as medium. Affected by this vulnerability is the page /index.php?route=categories. The manipulation of the title of the service descriptions leads to a stored XSS vulnerability. The issue was confirmed to be present in the source code as of commit 7d821a0f028b0778b245b99ab3d3bff1ac10e2d3 (dated 2024-05-08), and was fixed in commit 95322c5121dbd7070f3bd54f2848079654a0a8ea (dated 2025-03-31). The attack can be launched remotely. CWE Definition of the Vulnerability: CWE-79.
Published: 2025-08-26T00:00:00.000Z
Updated: 2025-08-26T15:26:10.222Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-52035 |
vulnerable | 2026-06-08 07:31:11.340471 |
Details available
A vulnerability in NotesCMS and specifically in the page /index.php?route=notes. The manipulation of the title of the service descriptions leads to a stored XSS vulnerability. The issue was confirmed to be present in the source code as of commit 7d821a0f028b0778b245b99ab3d3bff1ac10e2d3 (dated 2024-05-08) and was fixed in commit 95322c5121dbd7070f3bd54f2848079654a0a8ea (dated 2025-03-31). The attack can be launched remotely.
Published: 2025-08-26T00:00:00.000Z
Updated: 2025-08-26T15:27:13.375Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.