Approved changes feed: RSS · Atom

cpe:2.3:a:phpcms:phpcms:9.6.3:*:*:*:*:*:*:*

part: a version: 9.6.3 update: *

VendorPhpcms (83d879f0-66bc-5925-a229-6ac80f255a2c)
ProductPhpcms (835c51cb-4879-5caa-a3f7-e07f832ceb40)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/jylhx/phpcms purl2cpe 2026-06-01 10:14:41.485391
pkg:sourceforge/phpcmsv9 purl2cpe 2026-06-01 10:14:41.485393

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-25960 vulnerable 2026-06-08 07:12:51.420918 Details available
Cross Site Scripting vulnerability in phpcmsv9 v.9.6.3 allows a remote attacker to escalate privileges via the menu interface of the member center of the background administrator.
Published: 2025-02-20T00:00:00.000Z
Updated: 2025-02-21T21:29:19.724Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2025-25958 vulnerable 2026-06-08 07:12:51.420539 Details available
Cross Site Scripting vulnerabilities in phpcmsv9 v.9.6.3 allows a remote attacker to escalate privileges via a crafted script.
Published: 2025-02-20T00:00:00.000Z
Updated: 2025-02-21T16:04:29.958Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-40910 vulnerable 2026-06-08 05:35:19.360858 Details available
There is a reflective cross-site scripting (XSS) vulnerability in the PHPCMS V9.6.3 management side.
Published: 2022-06-15T15:37:38.000Z
Updated: 2024-08-04T02:59:30.350Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.