- Latest release
- Not known: cve.now hasn't read this package's releases
- Newest unaffected release
- Not known without release data
- Advisories
- 13 · 6 medium, 2 low
- Registry
- Packagist
Advisories 13
- CVE-2017-20064Medium 6.3
Elefant CMS layout code injection
Affected: fixed in 1.3.13.
- CVE-2017-20063Medium 6.3
Elefant CMS File Upload drop privileges management
Affected: fixed in 1.3.13.
- CVE-2017-20062Medium 5.0
Elefant CMS cross-site request forgery
Affected: fixed in 1.3.13.
- CVE-2017-20061Medium 4.3
Elefant CMS extended Reflected cross site scriting
Affected: fixed in 1.3.13.
- CVE-2017-20060Low 3.5
Elefant CMS Blog Post Persistent cross site scriting
Affected: fixed in 1.3.13.
- CVE-2017-20059Low 3.5
Elefant CMS Title Persistent cross site scriting
Affected: fixed in 1.3.13.
- CVE-2017-20058Medium 4.3
Elefant CMS Version Comparison Persistent cross site scriting
Affected: fixed in 1.3.13.
- CVE-2017-20057Medium 4.3
Elefant CMS Persistent cross site scriting
Affected: fixed in 1.3.13.
- CVE-2018-16975Unrated
An issue was discovered in Elefant CMS before 2.0.7.
Affected: fixed in 2.0.7.
- CVE-2018-16974Unrated
An issue was discovered in Elefant CMS before 2.0.7.
Affected: fixed in 2.0.7.
- CVE-2018-16387Unrated
An issue was discovered in Elefant CMS before 2.0.5.
Affected: fixed in 2.0.5.
- CVE-2018-15601Unrated
apps/filemanager/handlers/upload/drop.php in Elefant CMS 2.0.3 performs a urldecode step too late in the "Cannot upload executable files"…
Affected: fixed in 2.0.4.
- CVE-2012-1296Unrated
Multiple cross-site scripting (XSS) vulnerabilities in apps/admin/handlers/preview.php in Elefant CMS 1.0.x before 1.0.2-Beta and 1.1.x…
Affected: from 1.0, fixed in 1.0.2-Beta; from 1.1, fixed in 1.1.5-Beta.