Approved changes feed: RSS · Atom

cpe:2.3:a:wolfcms:wolf_cms:0.8.3.1:*:*:*:*:*:*:*

part: a version: 0.8.3.1 update: *

VendorWolfcms (1ad1956d-9ba9-5c69-932e-b7c249e38abe)
ProductWolf Cms (0e85d824-17e5-5ace-b913-531863798147)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/wolfcms/wolfcms purl2cpe 2026-06-01 10:18:03.524793

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2019-10646 vulnerable 2026-06-08 05:12:24.848374 Details available
Wolf CMS v0.8.3.1 is affected by cross site scripting (XSS) in the module Add Snippet (/?/admin/snippet/add). This allows an attacker to insert arbitrary JavaScript as user input, which will be executed whenever the affected snippet is loaded.
Published: 2019-03-30T02:30:10.000Z
Updated: 2024-08-04T22:32:00.637Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8814 vulnerable 2026-06-08 05:12:06.468903 Details available
Cross-site request forgery (CSRF) vulnerability in WolfCMS 0.8.3.1 allows remote attackers to hijack the authentication of users for requests that modify plugin/[pluginname]/settings by crafting a malicious request.
Published: 2018-04-04T15:00:00.000Z
Updated: 2024-08-05T07:02:26.137Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-8813 vulnerable 2026-06-08 05:12:06.468357 Details available
Open redirect vulnerability in the login[redirect] parameter login functionality in WolfCMS 0.8.3.1 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a malformed URL.
Published: 2018-04-04T15:00:00.000Z
Updated: 2024-08-05T07:02:26.132Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-6890 vulnerable 2026-06-08 05:11:54.377659 Details available
Cross-site scripting (XSS) vulnerability in Wolf CMS 0.8.3.1 via the page editing feature, as demonstrated by /?/admin/page/edit/3.
Published: 2018-02-22T19:00:00.000Z
Updated: 2024-08-05T06:17:16.903Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-18824 vulnerable 2026-06-08 05:11:14.799130 Details available
WolfCMS v0.8.3.1 allows XSS via an SVG file to /?/admin/plugin/file_manager/browse/.
Published: 2019-04-25T19:50:27.000Z
Updated: 2024-08-05T11:23:08.171Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-18823 vulnerable 2026-06-08 05:11:14.798708 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-15842 vulnerable 2026-06-08 05:11:03.656574 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-14837 vulnerable 2026-06-08 05:10:53.584627 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1000087 vulnerable 2026-06-08 05:10:25.407765 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2018-1000084 vulnerable 2026-06-08 05:10:25.403331 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2017-11611 vulnerable 2026-06-08 05:08:38.180108 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.