Approved changes feed: RSS · Atom

cpe:2.3:a:bigtreecms:bigtree_cms:4.4.3:*:*:*:*:*:*:*

part: a version: 4.4.3 update: *

VendorBigtreecms (917f96dc-c690-5eb9-834b-61a4e4e6bbae)
ProductBigtree Cms (4cab417c-988c-581b-9596-82a63607ef01)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:bigtreecms/core purl2cpe 2026-06-01 10:18:15.202791
pkg:github/bigtreecms/bigtree-cms purl2cpe 2026-06-01 10:18:15.202793

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-18467 vulnerable 2026-06-08 05:20:57.003979 Details available
Cross Site Scripting (XSS) vulnerabilty exists in BigTree-CMS 4.4.3 in the tag name field found in the Tags page under the General menu via a crafted website name by doing an authenticated POST HTTP request to admin/tags/create.
Published: 2021-08-26T17:28:41.000Z
Updated: 2024-08-04T14:00:49.283Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.