En bref
- CVE-2017-20057 est une vulnérabilité MOYENNE (CVSS 6.1) touchant elefant/cms, elefant cms (elefantcms).
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.60%, plus élevée que 48.5% des vulnérabilités.
- Correctif : mettre à jour vers 1.3.13 ou plus récent.
Description
A vulnerability classified as problematic has been found in Elefant CMS 1.3.12-RC. Affected is an unknown function. The manipulation of the argument username leads to basic cross site scripting (Persistent). It is possible to launch the attack remotely. Upgrading to version 1.3.13 is able to address this issue. It is recommended to upgrade the affected component.
NVD description
A vulnerability classified as problematic has been found in Elefant CMS 1.3.12-RC. Affected is an unknown function. The manipulation of the argument username leads to basic cross site scripting (Persistent). It is possible to launch the attack remotely. Upgrading to version 1.3.13 is able to address this issue. It is recommended to upgrade the affected component.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free