Elefant CMS CSRF Vulnerability

HIGH 8.8CVE-2018-16387 · GHSA-79m2-h67v-35q7 · Published 03/09/2018 · updated 17/06/2026

In short

CVE-2018-16387 is a HIGH (CVSS 8.8) vulnerability affecting elefant/cms, elefantcms (elefantcms).
Chance of exploitation in the next 30 days (EPSS): 0.65%, higher than 51.2% of all vulnerabilities.
Fix: update to 2.0.5 or later.

Package	Affected versions	Patched versions
elefant/cms Packagist	`< 2.0.5`	`2.0.5`
elefantcms elefantcms	`< 2.0.5`	`2.0.5`

An issue was discovered in Elefant CMS before 2.0.5. There is a CSRF vulnerability that can add an account via user/add.

NVD description

An issue was discovered in Elefant CMS before 2.0.5. There is a CSRF vulnerability that can add an account via user/add.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

< 2.0.5

2.0.5

< 2.0.5

2.0.5

More vulnerabilities in elefant/cms

See all →