Approved changes feed: RSS · Atom

cpe:2.3:a:nucleuscms:nucleus_cms:3.70:*:*:*:*:*:*:*

part: a version: 3.70 update: *

VendorNucleuscms (877d71cc-0c9d-5c20-a2b6-b996ec66f849)
ProductNucleus Cms (9ab51fc9-d001-5abb-9c6c-33ea8536823e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/nucleuscms/nucleuscms purl2cpe 2026-06-01 10:11:32.048560
pkg:sourceforge/nucleuscms purl2cpe 2026-06-01 10:11:32.048561

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-16636 vulnerable 2026-06-08 05:11:05.285209 Details available
Nucleus CMS 3.70 allows HTML Injection via the index.php body parameter.
Published: 2018-12-10T18:00:00.000Z
Updated: 2024-08-05T10:32:53.526Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2015-5454 vulnerable 2026-06-08 05:06:50.076186 Details available
Cross-site scripting (XSS) vulnerability in Nucleus CMS allows remote attackers to inject arbitrary web script or HTML via the title parameter when adding a new item.
Published: 2015-07-08T15:00:00.000Z
Updated: 2024-08-06T06:50:02.217Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.