Approved changes feed: RSS · Atom

cpe:2.3:a:yclas:yclas:4.3.0:*:*:*:*:*:*:*

part: a version: 4.3.0 update: *

VendorYclas (9072628b-06c3-554b-b69e-02f6de5ffdcc)
ProductYclas (c414a9ee-a94f-5e64-9ae9-255210ef82a4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/yclas/yclas purl2cpe 2026-06-01 10:15:25.513837

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-38710 vulnerable 2026-06-08 05:33:48.351676 Details available
Static (Persistent) XSS Vulnerability exists in version 4.3.0 of Yclas when using the install/view/form.php script. An attacker can store XSS in the database through the vulnerable SITE_NAME parameter.
Published: 2021-08-18T14:41:18.000Z
Updated: 2024-08-04T01:51:19.960Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.