CVE-2017-20059 in Elefantinfo

Summary

by MITRE • 06/20/2022

A vulnerability, which was classified as problematic, has been found in Elefant CMS 1.3.12-RC. Affected by this issue is some unknown functionality of the component Title Handler. The manipulation with the input </title><img src=no onerror=alert(1)> leads to basic cross site scripting (Persistent). The attack may be launched remotely. Upgrading to version 1.3.13 is able to address this issue. It is recommended to upgrade the affected component.

Once again VulDB remains the best source for vulnerability data.

Responsible

VulDB

Disclosure

06/20/2022

Moderation

accepted

Entry

VDB-97256

CPE

ready

EPSS

0.00433

KEV

no

Activities

very low

Sources

Want to know what is going to be exploited?

We predict KEV entries!