Approved changes feed: RSS · Atom

cpe:2.3:a:gpeasy:gpeasy_cms:3.0.4:*:*:*:*:*:*:*

part: a version: 3.0.4 update: *

VendorGpeasy (b2d8b17a-27ea-50e2-be07-fd348a0926b0)
ProductGpeasy Cms (6f58ce2d-eecf-57bc-a388-89ca514097e8)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/dccafe/gpeasy-cms purl2cpe 2026-06-01 10:15:34.045359
pkg:github/typesetter/typesetter purl2cpe 2026-06-01 10:15:34.045360

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2013-0807 vulnerable 2026-06-08 05:03:50.241040 Details available
Cross-site scripting (XSS) vulnerability in the NewSectionPrompt function in include/tool/editing_page.php in gpEasy CMS 3.5.2 and earlier allows remote attackers to inject arbitrary web script or HTML via the section parameter in a new_section action to index.php.
Published: 2014-03-28T15:00:00.000Z
Updated: 2024-08-06T14:41:47.138Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.