Approved changes feed: RSS · Atom

cpe:2.3:a:baigo:baigo_cms:2.1.1:*:*:*:*:*:*:*

part: a version: 2.1.1 update: *

VendorBaigo (aeb2c6fe-2265-591b-9d32-9a924dee81e4)
ProductBaigo Cms (44d74a3c-f352-539b-ad53-ca89f8c2edfc)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/baigostudio/baigocms purl2cpe 2026-06-01 10:17:46.998300

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-9227 vulnerable 2026-06-08 05:14:25.155989 Details available
An issue was discovered in baigo CMS 2.1.1. There is a vulnerability that allows remote attackers to execute arbitrary code. A BG_SITE_NAME parameter with malicious code can be written into the opt_base.inc.php file.
Published: 2019-02-28T14:00:00.000Z
Updated: 2024-09-16T16:27:27.399Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9226 vulnerable 2026-06-08 05:14:25.155584 Details available
An issue was discovered in baigo CMS 2.1.1. There is a persistent XSS vulnerability that allows remote attackers to inject arbitrary web script or HTML via the opt[base][BG_SITE_NAME] parameter to the bg_console/index.php?m=opt&c=request URI.
Published: 2019-02-28T14:00:00.000Z
Updated: 2024-09-17T04:04:32.940Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-16458 vulnerable 2026-06-08 05:11:04.876393 Details available
An issue was discovered in baigo CMS v2.1.1. There is an index.php?m=article&c=request CSRF that can cause publication of any article.
Published: 2018-09-04T11:00:00.000Z
Updated: 2024-08-05T10:24:32.400Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.