PublicCMS 4.0
Approved changes feed: RSS · Atom
cpe:2.3:a:publiccms:publiccms:4.0:*:*:*:*:*:*:*part: a version: 4.0 update: *
| Vendor | Publiccms (233a5fce-2c46-520f-b36f-83c5198ad8d3) |
|---|---|
| Product | Publiccms (6b6a9e34-45a1-5a16-93cc-fbae5f9ea5d6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:docker/sanluan/publiccms |
purl2cpe | 2026-06-01 10:11:21.439267 |
pkg:github/sanluan/publiccms |
purl2cpe | 2026-06-01 10:11:21.439269 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-51252 |
vulnerable | 2026-06-08 06:16:17.298637 |
Details available
PublicCMS 4.0 is vulnerable to Cross Site Scripting (XSS). Because files can be uploaded and online preview function is provided, pdf files and html files containing malicious code are uploaded, an XSS popup window is realized through online viewing.
Published: 2024-01-10T00:00:00.000Z
Updated: 2025-06-20T15:56:54.896Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-23389 |
vulnerable | 2026-06-08 05:40:57.036692 |
Details available
PublicCMS v4.0 was discovered to contain a remote code execution (RCE) vulnerability via the cmdarray parameter.
Published: 2022-02-14T20:48:05.000Z
Updated: 2024-08-03T03:43:45.217Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-40881 |
vulnerable | 2026-06-08 05:35:19.283638 |
Details available
An issue in the BAT file parameters of PublicCMS v4.0 allows attackers to execute arbitrary code.
Published: 2021-09-15T21:17:12.000Z
Updated: 2024-08-04T02:51:07.694Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-21333 |
vulnerable | 2026-06-08 05:22:30.775679 |
Details available
Cross Site Scripting (XSS) vulnerability in PublicCMS 4.0 to get an admin cookie when the Administrator reviews submit case.
Published: 2021-07-09T16:41:17.000Z
Updated: 2024-08-04T14:22:25.521Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-20915 |
vulnerable | 2026-06-08 05:22:30.583085 |
Details available
SQL Injection vulnerability found in PublicCMS v.4.0 allows a remote attacker to execute arbitrary code via sql parameter of the the SysSiteAdminControl.
Published: 2023-04-04T00:00:00.000Z
Updated: 2025-02-14T16:44:07.398Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-20914 |
vulnerable | 2026-06-08 05:22:30.582488 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18927 |
vulnerable | 2026-06-08 05:11:14.967894 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.