GCVE - cpe:2.3:a:anchorcms:anchor_cms:0.12.7:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:anchorcms:anchor_cms:0.12.7:*:*:*:*:*:*:*

part: a version: 0.12.7 update: *

Vendor	Anchorcms (`60dcecda-3a70-58ff-abbf-e80ee06de3d3`)
Product	Anchor Cms (`7a4c3b55-aa3d-5a93-948d-6aa614d28951`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/anchorcms/anchor-cms`	purl2cpe	2026-06-01 10:14:58.920703

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2025-46041`	vulnerable	2026-06-08 07:25:11.198850	Details available A stored cross-site scripting (XSS) vulnerability in Anchor CMS v0.12.7 allows attackers to inject malicious JavaScript via the page description field in the page creation interface (/admin/pages/add). Published: 2025-06-09T00:00:00.000Z Updated: 2025-06-09T19:47:45.597Z Open on db.gcve.eu Reference links http://anchor.com https://github.com/binneko/CVE-2025-46041	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-37732`	vulnerable	2026-06-08 06:39:48.057486	Details available Cross Site Scripting vulnerability in Anchor CMS v.0.12.7 allows a remote attacker to execute arbitrary code via a crafted .pdf file. Published: 2024-06-24T00:00:00.000Z Updated: 2024-08-02T03:57:39.760Z Open on db.gcve.eu Reference links https://gitee.com/Aa272899/CHG-sec/issues/I9UO7X	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-29499`	vulnerable	2026-06-08 06:33:29.175257	Details available Anchor CMS v0.12.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via /anchor/admin/users/delete/2. Published: 2024-03-22T00:00:00.000Z Updated: 2024-08-02T01:10:55.374Z Open on db.gcve.eu Reference links https://github.com/daddywolf/cms/blob/main/1.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-29338`	vulnerable	2026-06-08 06:33:29.106812	Details available Anchor CMS v0.12.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via /anchor/admin/categories/delete/2. Published: 2024-03-22T00:00:00.000Z Updated: 2024-08-26T13:42:56.412Z Open on db.gcve.eu Reference links https://github.com/PWwwww123/cms/blob/main/1.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-25576`	vulnerable	2026-06-08 05:41:46.000237	Details available Anchor CMS v0.12.7 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component anchor/routes/posts.php. This vulnerability allows attackers to arbitrarily delete posts. Published: 2022-03-24T22:06:49.000Z Updated: 2024-08-03T04:42:49.958Z Open on db.gcve.eu Reference links https://github.com/butterflyhack/anchorcms-0.12.7-CSRF https://github.com/anchorcms/anchor-cms	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2021-46253`	vulnerable	2026-06-08 05:38:03.170820	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2020-23342`	vulnerable	2026-06-08 05:22:31.888391	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.