Approved changes feed: RSS · Atom

cpe:2.3:a:pixelimity:pixelimity:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorPixelimity (faa4dcfb-1e9d-51ae-a46e-4fca84c9b3ce)
ProductPixelimity (2e038b64-92fe-52ee-86df-ed32c99c79d7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/pixelimity/pixelimity purl2cpe 2026-06-01 10:16:02.156479

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-5206 vulnerable 2026-06-08 07:35:24.388345 Pixelimity Installation index.php sql injection
MEDIUM (4.7)
A vulnerability classified as critical was found in Pixelimity 1.0. Affected by this vulnerability is an unknown functionality of the file /install/index.php of the component Installation. The manipulation of the argument site_description leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.
Published: 2025-05-26T21:31:04.541Z
Updated: 2025-05-27T14:01:37.871Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28590 vulnerable 2026-06-08 05:42:44.630211 Details available
A Remote Code Execution (RCE) vulnerability exists in Pixelimity 1.0 via admin/admin-ajax.php?action=install_theme.
Published: 2022-05-03T13:57:33.000Z
Updated: 2024-08-03T05:56:16.187Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2022-28589 vulnerable 2026-06-08 05:42:44.629689 Details available
A stored cross-site scripting (XSS) vulnerability in Pixelimity 1.0 allows attackers to execute arbitrary web scripts or HTML via the Title field in admin/pages.php?action=add_new
Published: 2022-05-03T13:59:31.000Z
Updated: 2024-08-03T05:56:16.211Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-42866 vulnerable 2026-06-08 05:35:23.009520 Details available
A Cross Site Scripting vulnerabilty exists in Pixelimity 1.0 via the Site Description field in pixelimity/admin/setting.php
Published: 2022-03-31T17:52:59.000Z
Updated: 2024-08-04T03:38:50.095Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2021-29056 vulnerable 2026-06-08 05:31:25.601874 Details available
Cross Site Scripting (XSS) vulnerability exists in Pixelimity 1.0 via the HTTP POST parameter to admin/setting.php.
Published: 2021-08-17T17:23:41.000Z
Updated: 2024-08-03T21:55:12.621Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-23522 vulnerable 2026-06-08 05:22:31.947448 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-19919 vulnerable 2026-06-08 05:11:16.322202 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.