Approved changes feed: RSS · Atom

cpe:2.3:a:hallowelt:bluespice:4.1.0:-:*:*:*:*:*:*

part: a version: 4.1.0 update: -

VendorHallowelt (e755a26d-a202-5af6-8b8f-f85b5e50f2d8)
ProductBluespice (c2ed4b08-dc19-545d-8c56-e2b5207719c0)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/bluespice/bluespice-free purl2cpe 2026-06-01 10:12:26.544694
pkg:sourcecode/bluespice purl2cpe 2026-06-01 10:12:26.544696

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-2510 vulnerable 2026-06-08 05:43:35.704077 Potential XSS on Special:SearchCenter
MEDIUM (4.3)
Cross-site Scripting (XSS) vulnerability in "Extension:ExtendedSearch" of Hallo Welt! GmbH BlueSpice allows attacker to inject arbitrary HTML (XSS) on page "Special:SearchCenter", using the search term in the URL.
Published: 2022-07-22T15:57:13.504Z
Updated: 2024-09-16T16:38:23.076Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.