themelogik CMSLogik 1.2.0
Approved changes feed: RSS · Atom
cpe:2.3:a:themelogik:cmslogik:1.2.0:*:*:*:*:*:*:*part: a version: 1.2.0 update: *
| Vendor | Themelogik (132ad038-c05e-5ed3-be57-16757703c095) |
|---|---|
| Product | Cmslogik (e5c1fcc3-db2e-54d3-bcdf-6db69260ab26) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-3535 |
vulnerable | 2026-06-08 05:04:31.986864 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in CMSLogik 1.2.0 and 1.2.1 allow remote attackers to inject arbitrary web script or HTML via the (1) admin_email, (2) header_title, (3) site_title parameter to admin/settings; (4) recaptcha_private or (5) recaptcha_public parameter to admin/captcha_settings; (6) fb_appid, (7) fp_secret, (8) tw_consumer_key, or (9) tw_consumer_secret parameter to admin/social_settings; (10) slug parameter to admin/gallery/save_item_settings; or (11) item_link parameter to admin/edit_menu_item_ajax. NOTE: this issue might be resultant from CSRF.
Published: 2013-05-13T23:00:00.000Z
Updated: 2024-08-06T16:14:56.262Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.