VULNERABILITY

CVE search

Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.

403,291 vulnerabilities · 1,767 actively exploited (CISA KEV)

elefantcms ✕Clear filters

5 results

ID	Severity	Summary	Published
CVE-2017-20058	MEDIUM6.1	A vulnerability classified as problematic was found in Elefant CMS 1.3.12-RC. Affected by this vulnerability is an unknown functionality of the component Version Comparison. The manipulation leads to basic cross site scripting (Persistent). The attack can be launched remotely. Upgrading to version 1.3.13 is able to add	20/06/2022
CVE-2018-16387	HIGH8.8	An issue was discovered in Elefant CMS before 2.0.5. There is a CSRF vulnerability that can add an account via user/add.	03/09/2018
CVE-2018-15601	CRITICAL9.8	apps/filemanager/handlers/upload/drop.php in Elefant CMS 2.0.3 performs a urldecode step too late in the "Cannot upload executable files" protection mechanism.	21/08/2018