Elefant CMS Multiple XSS Vulnerabilities

Description

References

• nvd.nist.gov/vuln/detail/CVE-2012-1296 · ADVISORY
• jbroadway/elefant commit 1e38b1d · WEB
• jbroadway/elefant commit 4fc4e0a · WEB
• exchange.xforce.ibmcloud.com/vulnerabilities/73421 · WEB
• jbroadway/elefant · PACKAGE
• web.archive.org/web/20120306001248/http://www.elefantcms.com/forum/discussion/39/elefant-1.0.2-and-1.1.5-security-updates-released · WEB
• web.archive.org/web/20200229030623/http://www.securityfocus.com/bid/52143 · WEB
• secunia.com/advisories/48118 · Vendor Advisory
• elefantcms.com/forum/discussion/39/elefant-1.0.2-and-1.1.5-security-updates-released · Vendor Advisory
• elefantcms.com/wiki/Changelog

More vulnerabilities in elefant/cms

• CVE-2017-20064HIGH 8.8A vulnerability was found in Elefant CMS 1.3.12-RC. It has been declared as critical. Affected by this vulnerability is an unknown functiona…
• CVE-2017-20063HIGH 8.8A vulnerability was found in Elefant CMS 1.3.12-RC. It has been classified as critical. Affected is an unknown function of the file /fileman…
• CVE-2017-20062HIGH 8.8A vulnerability was found in Elefant CMS 1.3.12-RC and classified as problematic. This issue affects some unknown processing. The manipulati…
• CVE-2017-20061MEDIUM 5.4A vulnerability has been found in Elefant CMS 1.3.12-RC and classified as problematic. This vulnerability affects unknown code of the file /…
• CVE-2017-20060MEDIUM 5.4A vulnerability, which was classified as problematic, was found in Elefant CMS 1.3.12-RC. This affects an unknown part of the component Blog…