Approved changes feed: RSS · Atom

cpe:2.3:a:ofisimo_web-based_software_technologies:association_web_package_flora:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorOfisimo Web Based Software Technologies (54e7c0ac-1345-5117-9648-bb5583f28dbd)
ProductAssociation Web Package Flora (81b76dee-bb51-59d5-ba4d-60c1c9dc223a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-7760 vulnerable 2026-06-08 07:45:18.180603 Reflected XSS in Ofisimo's Association Web Package Flora
HIGH (7.6)
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Ofisimo Web-Based Software Technologies Association Web Package Flora allows XSS Through HTTP Headers. This issue affects Association Web Package Flora: from v3.0 through 03022026. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-02-03T12:33:23.735Z
Updated: 2026-06-05T11:47:35.770Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.