GCVE - cpe:2.3:a:vegadesign:profiledesign

Approved changes feed: RSS · Atom

cpe:2.3:a:vegadesign:profiledesign_cms:6.0.2.5:*:*:*:*:*:*:*

part: a version: 6.0.2.5 update: *

Vendor	Vegadesign (`0c3971ce-9f92-5277-b08e-dccd6e8bcc6b`)
Product	Profiledesign Cms (`2c5ef4aa-931e-56bc-8dff-89b0428b22bf`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2019-7409`	vulnerable	2026-06-08 05:14:14.424163	Details available Multiple cross-site scripting (XSS) vulnerabilities in ProfileDesign CMS v6.0.2.5 allows remote attackers to inject arbitrary web script or HTML via the (1) page, (2) gbs, (3) side, (4) id, (5) imgid, (6) cat, or (7) orderby parameter. Published: 2019-05-13T13:52:12.000Z Updated: 2024-08-04T20:46:46.307Z Open on db.gcve.eu Reference links https://metamorfosec.com/Files/Advisories/METS-2019-001-Multiple_XSS_Vulnerabilities_in_ProfileDesign_CMS_v6.0.2.5.txt https://www.vegadesign.net/?side=pdcmd_endringslogg	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.