GCVE - cpe:2.3:a:yuba:u5cms:8.3.5:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:yuba:u5cms:8.3.5:*:*:*:*:*:*:*

part: a version: 8.3.5 update: *

Notes

Imported from NVD CPE 2.0 feed

PURL	Source	Last updated
`pkg:github/u5cms/u5cms`	purl2cpe	2026-06-01 10:17:37.477472

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-34937`	vulnerable	2026-06-08 05:46:04.041248	Details available Yuba u5cms v8.3.5 was discovered to contain a Cross-Site Request Forgery (CSRF) via the component savepage.php. This vulnerability allows attackers to execute arbitrary code. Published: 2022-08-03T00:50:03.000Z Updated: 2024-08-03T09:22:10.837Z Open on db.gcve.eu Reference links https://github.com/u5cms/u5cms/issues/51	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-32444`	vulnerable	2026-06-08 05:44:43.334317	Details available An issue was discovered in u5cms verion 8.3.5 There is a URL redirection vulnerability that can cause a user's browser to be redirected to another site via /loginsave.php. Published: 2022-06-17T15:15:43.000Z Updated: 2024-08-03T07:39:51.194Z Open on db.gcve.eu Reference links https://github.com/u5cms/u5cms/issues/50	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-32442`	vulnerable	2026-06-08 05:44:43.333718	Details available u5cms version 8.3.5 is vulnerable to Cross Site Scripting (XSS). When a user accesses the default home page if the parameter passed in is http://127.0.0.1/? "Onmouseover=%27tzgl (96502)%27bad=", it can cause html injection. Published: 2022-06-17T15:22:58.000Z Updated: 2024-08-03T07:39:51.108Z Open on db.gcve.eu Reference links https://github.com/u5cms/u5cms/issues/49	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.