Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

7 records

Vendor: Elefant Component: Elefant Cms Clear all filters
TI-2017-14130 CVE-2017-20064 · GHSA-gx6v-67qv-rhx5

Elefant CMS layout code injection

Priority HIGH 71

A vulnerability was found in Elefant CMS 1.3.12-RC.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01099 Published 2022-06-20 Fixed in 1.3.13 CWE-94
TI-2017-14128 CVE-2017-20062 · GHSA-pq7f-cq6q-94xh

Elefant CMS cross-site request forgery

Priority HIGH 71

A vulnerability was found in Elefant CMS 1.3.12-RC and classified as problematic.

CVSS 3.1HIGH 8.8 Network No auth User interaction EPSS 0.00384 Published 2022-06-20 Fixed in 1.3.13 CWE-352
TI-2017-14127 CVE-2017-20061 · GHSA-hgm9-pww2-93pc

Elefant CMS extended Reflected cross site scriting

Priority LOW 25

A vulnerability has been found in Elefant CMS 1.3.12-RC and classified as problematic.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00468 Published 2022-06-20 Fixed in 1.3.13 CWE-80
TI-2017-14126 CVE-2017-20060 · GHSA-4453-g295-24mh

Elefant CMS Blog Post Persistent cross site scriting

Priority LOW 25

A vulnerability, which was classified as problematic, was found in Elefant CMS 1.3.12-RC.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00523 Published 2022-06-20 Fixed in 1.3.13 CWE-80
TI-2017-14125 CVE-2017-20059 · GHSA-7f7g-8q3x-jpx9

Elefant CMS Title Persistent cross site scriting

Priority LOW 25

A vulnerability, which was classified as problematic, has been found in Elefant CMS 1.3.12-RC.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00523 Published 2022-06-20 Fixed in 1.3.13 CWE-80
TI-2017-14123 CVE-2017-20057 · GHSA-xwj7-29j7-rw76

Elefant CMS Persistent cross site scriting

Priority LOW 28

A vulnerability classified as problematic has been found in Elefant CMS 1.3.12-RC.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00596 Published 2022-06-20 Fixed in 1.3.13 CWE-80