Approved changes feed: RSS · Atom

cpe:2.3:a:ukcms:ukcms:1.1.10:*:*:*:*:*:*:*

part: a version: 1.1.10 update: *

VendorUkcms (f64ae1a5-f2e8-5f14-97e7-898389f6f2cc)
ProductUkcms (72baa27d-d4f1-586f-bc80-ec78bd8bcab8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/liliangxing/ukcms purl2cpe 2026-06-01 10:16:30.071707
pkg:github/yxcmf/ukcms purl2cpe 2026-06-01 10:16:30.071708

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-20977 vulnerable 2026-06-08 05:22:30.628930 Details available
A stored cross site scripting (XSS) vulnerability in index.php/legend/6.html of UK CMS v1.1.10 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in the Comments section.
Published: 2021-08-12T14:49:19.000Z
Updated: 2024-08-04T14:22:25.492Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-18449 vulnerable 2026-06-08 05:20:56.984904 Details available
Cross Site Scripting (XSS) vulnerability exists in UKCMS v1.1.10 via data in the index function in Single.php
Published: 2021-08-12T17:15:55.000Z
Updated: 2024-08-04T14:00:49.176Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-10888 vulnerable 2026-06-08 05:12:25.464259 Details available
A CSRF Issue that can add an admin user was discovered in UKcms v1.1.10 via admin.php/admin/role/add.html.
Published: 2019-04-05T17:35:01.000Z
Updated: 2024-08-04T22:40:15.143Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.