Approved changes feed: RSS · Atom

cpe:2.3:a:bigtreecms:bigtree_cms:4.2.22:*:*:*:*:*:*:*

part: a version: 4.2.22 update: *

VendorBigtreecms (917f96dc-c690-5eb9-834b-61a4e4e6bbae)
ProductBigtree Cms (4cab417c-988c-581b-9596-82a63607ef01)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:bigtreecms/core purl2cpe 2026-06-01 10:18:15.184148
pkg:github/bigtreecms/bigtree-cms purl2cpe 2026-06-01 10:18:15.184149

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-10183 vulnerable 2026-06-08 05:10:26.407662 Details available
An issue was discovered in BigTree 4.2.22. There is cross-site scripting (XSS) in /core/inc/lib/less.php/test/index.php because of a $_SERVER['REQUEST_URI'] echo, as demonstrated by the dir parameter in a file=charsets action.
Published: 2018-04-17T14:00:00.000Z
Updated: 2024-08-05T07:32:01.601Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.