Approved changes feed: RSS · Atom

cpe:2.3:a:naviwebs:navigatecms:2.9:*:*:*:*:*:*:*

part: a version: 2.9 update: *

VendorNaviwebs (118bae96-31c7-5625-9ef7-bd28722d99eb)
ProductNavigatecms (e4994da9-664f-51c2-9215-21a6fae5cf1a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/navigatecms/navigate-cms purl2cpe 2026-06-01 10:11:18.852482
pkg:sourceforge/navigatecms purl2cpe 2026-06-01 10:11:18.852485

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-23657 vulnerable 2026-06-08 05:22:32.040773 Details available
NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) on module "Configuration."
Published: 2020-08-26T16:55:48.000Z
Updated: 2024-08-04T14:58:15.253Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-23656 vulnerable 2026-06-08 05:22:32.040301 Details available
NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) on module "Content."
Published: 2020-08-26T16:53:13.000Z
Updated: 2024-08-04T14:58:15.236Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-23655 vulnerable 2026-06-08 05:22:32.039807 Details available
NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) on module "Configuration."
Published: 2020-08-26T16:48:52.000Z
Updated: 2024-08-04T14:58:15.196Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-23654 vulnerable 2026-06-08 05:22:32.039322 Details available
NavigateCMS 2.9 is affected by Cross Site Scripting (XSS) via the module "Shop."
Published: 2020-08-26T16:42:04.000Z
Updated: 2024-08-04T14:58:15.193Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-23243 vulnerable 2026-06-08 05:22:31.830335 Details available
Cross Site Scripting (XSS) vulnerability in NavigateCMS NavigateCMS 2.9 via the name="wrong_path_redirect" feature.
Published: 2021-07-26T20:23:26.000Z
Updated: 2024-08-04T14:58:14.749Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-23242 vulnerable 2026-06-08 05:22:31.829834 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-14067 vulnerable 2026-06-08 05:18:01.997534 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.