DiliCMS 2.4.0
Approved changes feed: RSS · Atom
cpe:2.3:a:dilicms:dilicms:2.4.0:*:*:*:*:*:*:*part: a version: 2.4.0 update: *
| Vendor | Dilicms (4678a87f-e54c-55f8-b6cf-f5718d9ff416) |
|---|---|
| Product | Dilicms (d4ebdf42-d5d0-5e3c-b50c-5cad9bcabe30) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/chekun/dilicms |
purl2cpe | 2026-06-01 10:13:16.681867 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2019-8440 |
vulnerable | 2026-06-08 05:14:24.127012 |
Details available
An issue was discovered in DiliCMS 2.4.0. There is a Stored XSS Vulnerability in the third textbox (aka site logo) of "System setting->site setting" of admin/index.php, aka site_logo.
Published: 2019-03-07T22:00:00.000Z
Updated: 2024-08-04T21:17:31.576Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8439 |
vulnerable | 2026-06-08 05:14:24.126616 |
Details available
An issue was discovered in DiliCMS 2.4.0. There is a Stored XSS Vulnerability in the second textbox of "System setting->site setting" of admin/index.php, aka site_domain.
Published: 2019-03-07T22:00:00.000Z
Updated: 2024-08-04T21:17:31.576Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8438 |
vulnerable | 2026-06-08 05:14:24.126211 |
Details available
An issue was discovered in DiliCMS 2.4.0. There is a Stored XSS Vulnerability in the first textbox of "System setting->site setting" of admin/index.php, aka site_name.
Published: 2019-03-07T22:00:00.000Z
Updated: 2024-08-04T21:17:31.730Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19291 |
vulnerable | 2026-06-08 05:11:15.590524 |
Details available
An issue was discovered in DiliCMS 2.4.0. There is a CSRF vulnerability that can delete a user or group via an admin/index.php/user/del/1 or admin/index.php/role/del/2 URI.
Published: 2018-11-15T06:00:00.000Z
Updated: 2024-08-05T11:30:04.079Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18210 |
vulnerable | 2026-06-08 05:11:07.258495 |
Details available
XSS exists in DiliCMS 2.4.0 via the admin/index.php/setting/site?tab=site_attachment attachment_url parameter.
Published: 2018-10-10T16:00:00.000Z
Updated: 2024-08-05T11:01:14.966Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18209 |
vulnerable | 2026-06-08 05:11:07.257998 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10430 |
vulnerable | 2026-06-08 05:10:26.672717 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.