Vendors / Eleanor-cms Records 2 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 0 CVSS 9.0–10.0
CVSS high 0 CVSS 7.0–8.9
Exploited now Eleanor-cms records in CISA KEV No Eleanor-cms vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 30
Open redirect vulnerability in go.php in Eleanor CMS allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the QUERY_STRING.
CVSS 2.0 MEDIUM 5.0· Network · No auth · Interaction — · EPSS 0.04646 · Published 2014-12-02 · No fix listed
Priority LOW 23
An issue was discovered in Eleanor CMS through 2015-03-19.
CVSS 3.0 MEDIUM 4.8· Network · High privileges · User interaction · EPSS 0.00534 · Published 2018-10-28 · No fix listed CWE-79
Open these records in search → All records by CVSS severity
Critical0 High0 Medium2 Low0 No CVSS0