Approved changes feed: RSS · Atom

cpe:2.3:a:codeastro:complaint_management_system:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCodeastro (f92dc1fe-f2d7-58ad-92b0-40a98a9042be)
ProductComplaint Management System (e9d54961-147f-512f-a911-fa2d22d51b20)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-13558 vulnerable 2026-07-29 00:23:33.180187 CodeAstro Complaint Management System Report addreport cross site scripting
LOW (3.5)
A security flaw has been discovered in CodeAstro Complaint Management System 1.0. This issue affects some unknown processing of the file /report/addreport of the component Report Handler. Performing a manipulation of the argument Report Title results in cross site scripting. Remote exploitation of the attack is possible. The exploit has been released to the public and may be used for attacks.
Published: 2026-06-29T10:15:06.141Z
Updated: 2026-06-29T13:27:58.208Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-13549 vulnerable 2026-07-29 00:23:33.173525 CodeAstro Complaint Management System Report Endpoint Report.php deletereport authorization
MEDIUM (5.4)
A security flaw has been discovered in CodeAstro Complaint Management System 1.0. The affected element is the function deletereport of the file application/controllers/Report.php of the component Report Endpoint. The manipulation results in authorization bypass. The attack can be executed remotely. The exploit has been released to the public and may be used for attacks.
Published: 2026-06-29T08:00:09.515Z
Updated: 2026-06-29T10:33:43.126Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.