GCVE - cpe:2.3:a:codologic:codoforum:4.8.3:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:codologic:codoforum:4.8.3:*:*:*:*:*:*:*

part: a version: 4.8.3 update: *

Vendor	Codologic (`82426de5-c8e3-5eb5-b391-1778855299c1`)
Product	Codoforum (`9b8a4bf1-fb95-5921-8935-2d4a58ae13e1`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2020-5843`	vulnerable	2026-06-08 05:26:43.960813	Details available Codoforum 4.8.3 allows XSS in the admin dashboard via a category to the Manage Users screen. Published: 2020-01-07T12:51:19.000Z Updated: 2024-08-04T08:39:26.034Z Open on db.gcve.eu Reference links http://codologic.com/forum/index.php?u=/category/news-and-announcements https://vyshnavvizz.blogspot.com/2020/01/persistent-cross-site-scripting-admin.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-5842`	vulnerable	2026-06-08 05:26:43.960495	Details available Codoforum 4.8.3 allows XSS in the user registration page: via the username field to the index.php?u=/user/register URI. The payload is, for example, executed on the admin/index.php?page=users/manage page. Published: 2020-01-07T19:17:55.000Z Updated: 2024-08-04T08:39:25.925Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/47876 https://medium.com/%40prasanthc41m/cve-2020-5842-stored-xss-vulnerability-in-codoforum-4-8-3-b2e1133c6a91	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-5306`	vulnerable	2026-06-08 05:26:41.700955	Details available Codoforum 4.8.3 allows XSS via a post using parameters display name, title name, or content. Published: 2020-01-05T22:32:54.000Z Updated: 2024-08-04T08:22:09.139Z Open on db.gcve.eu Reference links http://codologic.com/forum/index.php?u=/category/news-and-announcements https://vyshnavvizz.blogspot.com/2020/01/stored-cross-site-scripting-in.html https://www.exploit-db.com/exploits/47886	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-5305`	vulnerable	2026-06-08 05:26:41.700434	Details available Codoforum 4.8.3 allows XSS in the admin dashboard via a name field of a new user, i.e., on the Manage Users screen. Published: 2020-01-05T22:26:39.000Z Updated: 2024-08-04T08:22:09.254Z Open on db.gcve.eu Reference links http://codologic.com/forum/index.php?u=/category/news-and-announcements https://vyshnavvizz.blogspot.com/2020/01/stored-cross-site-scripting-in_2.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.