Approved changes feed: RSS · Atom

cpe:2.3:a:magmi_project:magmi:0.7.22:*:*:*:*:*:*:*

part: a version: 0.7.22 update: *

VendorMagmi Project (d5af86cf-0161-5df7-b0d0-52e02d46e6d4)
ProductMagmi (c6b66855-af1c-5e49-ba78-8487dc3f4908)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/dweeves/magmi-git purl2cpe 2026-06-01 10:16:58.626524
pkg:sourceforge/magmi purl2cpe 2026-06-01 10:16:58.626525

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2017-7391 vulnerable 2026-06-08 05:09:55.828400 Details available
A Cross-Site Scripting (XSS) was discovered in 'Magmi 0.7.22'. The vulnerability exists due to insufficient filtration of user-supplied data (prefix) passed to the 'magmi-git-master/magmi/web/ajax_gettime.php' URL. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website.
Published: 2017-04-01T01:07:00.000Z
Updated: 2024-08-05T16:04:10.568Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.