CVE-2018-12250

HIGH 7.2CVE-2018-12250 · Published 03/07/2019 · updated 17/06/2026

In short

CVE-2018-12250 is a HIGH (CVSS 7.2) vulnerability affecting elite cms (elitecms).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 75.7% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
elite cms elitecms	`= 2.01`	No fix yet

An issue was discovered in Elite CMS Pro 2.01. In /admin/add_sidebar.php, the ?page= parameter is vulnerable to SQL injection.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.