Approved changes feed: RSS · Atom

cpe:2.3:a:gleezcms:gleez_cms:2.0:*:*:*:*:*:*:*

part: a version: 2.0 update: *

VendorGleezcms (207a54f7-739e-5443-8164-814f0e3eab1b)
ProductGleez Cms (95dc0aba-cfcd-591a-892d-ed74125a7058)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/gleez/cms purl2cpe 2026-06-01 10:11:20.188869

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2018-7035 vulnerable 2026-06-08 05:11:54.739791 Details available
Cross-site scripting (XSS) vulnerability in Gleez CMS 1.2.0 and 2.0 might allow remote attackers (users) to inject JavaScript via HTML content in an editor, which will result in Stored XSS when an Administrator tries to edit the same content, as demonstrated by use of the source editor for HTML mode in an Add Blog action.
Published: 2018-04-05T14:00:00.000Z
Updated: 2024-08-05T06:17:17.347Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.