Ui Ux Pro Max Skill
Approved changes feed: RSS · Atom
cpe:2.3:a:nextlevelbuilder:ui-ux-pro-max-skill:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Nextlevelbuilder (b77c3db5-6aa1-5b86-a1f9-ebbdf06ed302) |
|---|---|
| Product | Ui Ux Pro Max Skill (e0a6f5f7-235a-5fe9-a898-1d7f9cf039eb) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-7596 |
vulnerable | 2026-06-08 08:08:57.448319 |
nextlevelbuilder ui-ux-pro-max-skill Slide Generator generate-slide.py data.get cross site scripting
MEDIUM (4.3)
A vulnerability has been found in nextlevelbuilder ui-ux-pro-max-skill up to 2.5.0. Affected by this issue is the function data.get of the file .claude/skills/design-system/scripts/generate-slide.py of the component Slide Generator. Such manipulation leads to cross site scripting. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The project was informed of the problem early through a pull request but has not reacted yet.
Published: 2026-05-01T21:00:19.576Z
Updated: 2026-05-02T01:23:29.311Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-7595 |
vulnerable | 2026-06-08 08:08:57.447909 |
nextlevelbuilder ui-ux-pro-max-skill Tailwind Config Generator tailwind_config_gen.py _format_plugins code injection
MEDIUM (6.3)
A flaw has been found in nextlevelbuilder ui-ux-pro-max-skill up to 2.5.0. Affected by this vulnerability is the function _format_plugins of the file .claude/skills/ui-styling/scripts/tailwind_config_gen.py of the component Tailwind Config Generator. This manipulation causes code injection. The attack is possible to be carried out remotely. The exploit has been published and may be used. The project was informed of the problem early through a pull request but has not reacted yet.
Published: 2026-05-01T20:45:10.767Z
Updated: 2026-05-04T16:12:39.126Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.