GCVE - cpe:2.3:a:getkirby:kirby:2.5.12:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:getkirby:kirby:2.5.12:*:*:*:*:*:*:*

part: a version: 2.5.12 update: *

Vendor	Getkirby (`da41d41c-b485-567c-b366-faa47ec5a908`)
Product	Kirby (`6dfbf0fd-95ab-5316-9aae-4897db844241`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/getkirby/kirby`	purl2cpe	2026-06-01 10:11:41.596522

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2018-16630`	vulnerable	2026-06-08 05:11:05.278088	Details available Kirby v2.5.12 allows XSS by using the "site files" Add option to upload an SVG file. Published: 2018-12-28T17:00:00.000Z Updated: 2024-08-05T10:32:53.774Z Open on db.gcve.eu Reference links https://github.com/security-breachlock/CVE-2018-16630/blob/master/Kirby_Insecure%20file%20validation.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-16628`	vulnerable	2026-06-08 05:11:05.275694	Details available panel/login in Kirby v2.5.12 allows XSS via a blog name. Published: 2018-12-04T16:00:00.000Z Updated: 2024-08-05T10:32:53.021Z Open on db.gcve.eu Reference links https://github.com/security-breachlock/CVE-2018-16628/blob/master/kirby10.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-16627`	vulnerable	2026-06-08 05:11:05.275433	Details available panel/login in Kirby v2.5.12 allows Host header injection via the "forget password" feature. Published: 2018-12-20T22:00:00.000Z Updated: 2024-08-05T10:32:54.014Z Open on db.gcve.eu Reference links https://github.com/security-breachlock/CVE-2018-16627	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-16624`	vulnerable	2026-06-08 05:11:05.273223	Details available panel/pages/home/edit in Kirby v2.5.12 allows XSS via the title of a new page. Published: 2019-05-13T12:56:27.000Z Updated: 2024-08-05T10:32:52.318Z Open on db.gcve.eu Reference links https://github.com/security-breachlock/CVE-2018-16624/blob/master/CVE-2018-16624.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-16623`	vulnerable	2026-06-08 05:11:05.272823	Details available Kirby V2.5.12 is prone to a Persistent XSS attack via the Title of the "Site options" in the admin panel dashboard dropdown. Published: 2019-05-13T12:57:55.000Z Updated: 2024-08-05T10:32:53.537Z Open on db.gcve.eu Reference links https://github.com/security-breachlock/CVE-2018-16623/blob/master/CVE-2018-16623.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-14520`	vulnerable	2026-06-08 05:10:53.011244	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-14519`	vulnerable	2026-06-08 05:10:53.010642	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.