Kurz gesagt
- CVE-2012-1296 ist eine Schwachstelle (MITTEL (CVSS 4.3)) in elefant/cms, elefantcms (elefantcms).
- Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 1.3%, höher als bei 70.1% aller Schwachstellen.
- Abhilfe: auf 1.0.2-Beta, 1.1.5-Beta oder neuer aktualisieren.
| Package | Affected versions | Patched versions |
|---|
| elefant/cms Packagist | ≥ 1.0, < 1.0.2-Beta≥ 1.1, < 1.1.5-Beta
| 1.0.2-Beta1.1.5-Beta
|
| elefantcms | = 1.1.1_beta= 1.1.2_beta= 1.1.3_beta≤ 1.0.1≤ 1.1.4_beta
| No fix yet |
Description
Multiple cross-site scripting (XSS) vulnerabilities in apps/admin/handlers/preview.php in Elefant CMS 1.0.x before 1.0.2-Beta and 1.1.x before 1.1.5-Beta allow remote attackers to inject arbitrary web script or HTML via the (1) title or (2) body parameter to admin/preview.
NVD description
Multiple cross-site scripting (XSS) vulnerabilities in apps/admin/handlers/preview.php in Elefant CMS 1.0.x before 1.0.2-Beta and 1.1.x before 1.1.5-Beta allow remote attackers to inject arbitrary web script or HTML via the (1) title or (2) body parameter to admin/preview.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free