GCVE - cpe:2.3:a:wbce:wbce_cms:1.5.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:wbce:wbce_cms:1.5.2:*:*:*:*:*:*:*

part: a version: 1.5.2 update: *

Vendor	Wbce (`25505168-e398-58ca-86f3-dca0bfe1c6dd`)
Product	Wbce Cms (`be0de863-786f-5eb8-be3f-b5bc8eef8102`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
`pkg:github/wbce/wbce_cms`	purl2cpe	2026-06-01 10:11:03.086394

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-50936`	vulnerable	2026-06-08 05:52:03.744074	WBCE CMS 1.5.2 - Remote Code Execution (RCE) (Authenticated) HIGH (8.8) WBCE CMS version 1.5.2 contains an authenticated remote code execution vulnerability that allows attackers to upload malicious droplets through the admin panel. Authenticated attackers can exploit the droplet upload functionality in the admin tools to create and execute arbitrary PHP code by crafting a specially designed zip file payload. Published: 2026-01-13T22:52:02.201Z Updated: 2026-03-05T01:29:37.229Z Open on db.gcve.eu Reference links https://www.exploit-db.com/exploits/50707 https://wbce.org/ https://wbce.org/de/downloads/ https://github.com/WBCE/WBCE_CMS https://www.vulncheck.com/advisories/wbce-cms-remote-code-execution-rce-authenticated	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-30073`	vulnerable	2026-06-08 05:43:36.950113	Details available WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting (XSS) via /admin/users/save.php. Published: 2022-05-17T16:02:11.000Z Updated: 2024-08-03T06:40:47.682Z Open on db.gcve.eu Reference links https://github.com/APTX-4879/CVE https://github.com/APTX-4879/CVE/blob/main/CVE-2022-30073.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-30072`	vulnerable	2026-06-08 05:43:36.949603	Details available WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting (XSS) via \admin\pages\sections_save.php namesection2 parameters. Published: 2022-05-17T16:05:41.000Z Updated: 2024-08-03T06:40:47.122Z Open on db.gcve.eu Reference links https://github.com/APTX-4879/CVE https://github.com/WBCE/WBCE_CMS https://github.com/APTX-4879/CVE/blob/main/CVE-2022-30072.pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-28477`	vulnerable	2026-06-08 05:42:44.546950	Details available WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting (XSS). Published: 2022-04-28T19:41:21.000Z Updated: 2024-08-03T05:56:15.478Z Open on db.gcve.eu Reference links https://github.com/APTX-4879/CVE https://github.com/APTX-4879/CVE/blob/main/CVE-2022-28477..pdf	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-25101`	vulnerable	2026-06-08 05:41:45.180707	Details available A vulnerability in the component /templates/install.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file. Published: 2022-02-23T21:11:24.000Z Updated: 2024-08-03T04:29:01.642Z Open on db.gcve.eu Reference links https://github.com/dota-st/Vulnerability/blob/master/WBCE_CMS_second.md	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-25099`	vulnerable	2026-06-08 05:41:45.180320	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.