GCVE - cpe:2.3:a:no-cms_project:no-cms:1.1.3:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:no-cms_project:no-cms:1.1.3:*:*:*:*:*:*:*

part: a version: 1.1.3 update: *

Vendor	No Cms Project (`483d9bc7-bee7-569d-acb5-7f393bdba3ee`)
Product	No Cms (`1cc8db08-a631-58bf-ab34-b9d54a2a060d`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from NVD CPE 2.0 feed

PURL	Source	Last updated
`pkg:github/gofrendiasgard/no-cms`	purl2cpe	2026-06-01 10:13:15.192365

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-19902`	vulnerable	2026-06-08 05:11:16.306848	Details available No-CMS 1.1.3 is prone to Persistent XSS via the blog/manage_article "keyword" parameter. Published: 2018-12-31T15:00:00.000Z Updated: 2024-08-05T11:51:17.516Z Open on db.gcve.eu Reference links https://github.com/security-breachlock/CVE-2018-19902/blob/master/XSS.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-19901`	vulnerable	2026-06-08 05:11:16.306456	Details available No-CMS 1.1.3 is prone to Persistent XSS via the blog/manage_article/index/ "article_title" parameter. Published: 2018-12-31T15:00:00.000Z Updated: 2024-08-05T11:51:17.552Z Open on db.gcve.eu Reference links https://github.com/security-breachlock/CVE-2018-19901/blob/master/XSS-1.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-18868`	vulnerable	2026-06-08 05:11:14.842899	Details available No-CMS 1.1.3 is prone to Persistent XSS via a contact_us name parameter, as demonstrated by the VG48Z5PqVWname parameter. Published: 2018-10-31T06:00:00.000Z Updated: 2024-08-05T11:23:08.842Z Open on db.gcve.eu Reference links https://github.com/s-kustm/Subodh/blob/master/CVE-2018-18868.pdf	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open this panel to browse, search, copy or download the JSON record.