En resumen
- CVE-2012-1296 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a elefant/cms, elefantcms (elefantcms).
- Probabilidad de explotación en los próximos 30 días (EPSS): 1.3%, mayor que el 70.1% de las vulnerabilidades.
- Solución: actualizar a 1.0.2-Beta, 1.1.5-Beta o posterior.
| Package | Affected versions | Patched versions |
|---|
| elefant/cms Packagist | ≥ 1.0, < 1.0.2-Beta≥ 1.1, < 1.1.5-Beta
| 1.0.2-Beta1.1.5-Beta
|
| elefantcms | = 1.1.1_beta= 1.1.2_beta= 1.1.3_beta≤ 1.0.1≤ 1.1.4_beta
| No fix yet |
Description
Multiple cross-site scripting (XSS) vulnerabilities in apps/admin/handlers/preview.php in Elefant CMS 1.0.x before 1.0.2-Beta and 1.1.x before 1.1.5-Beta allow remote attackers to inject arbitrary web script or HTML via the (1) title or (2) body parameter to admin/preview.
NVD description
Multiple cross-site scripting (XSS) vulnerabilities in apps/admin/handlers/preview.php in Elefant CMS 1.0.x before 1.0.2-Beta and 1.1.x before 1.1.5-Beta allow remote attackers to inject arbitrary web script or HTML via the (1) title or (2) body parameter to admin/preview.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free