Approved changes feed: RSS · Atom

cpe:2.3:a:code-projects:for_plugin:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCode Projects (a64d3912-7513-5560-97cf-6216c4da48a5)
ProductFor Plugin (ba15c3a1-36c2-532f-be66-d2f9bc2de474)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-7503 vulnerable 2026-06-08 08:08:57.312037 code-projects for Plugin cstecgi.cgi setWiFiMultipleConfig buffer overflow
HIGH (8.8)
A vulnerability was detected in code-projects for Plugin 4.1.2cu.5137. The impacted element is the function setWiFiMultipleConfig in the library /lib/cste_modules/wireless.so of the file /cgi-bin/cstecgi.cgi. The manipulation of the argument wepkey2 results in buffer overflow. The attack can be launched remotely. The exploit is now public and may be used.
Published: 2026-04-30T21:45:11.565Z
Updated: 2026-05-04T16:56:29.317Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-2214 vulnerable 2026-06-08 07:55:16.730076 code-projects for Plugin AdminAddAlbum.php cross site scripting
LOW (2.4)
A weakness has been identified in code-projects for Plugin 1.0. This affects an unknown part of the file /Administrator/PHP/AdminAddAlbum.php. This manipulation of the argument txtalbum causes cross site scripting. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks.
Published: 2026-02-09T04:02:06.833Z
Updated: 2026-02-23T09:56:18.577Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.