Cross site scripting in Elefant CMS
Moderate severity
GitHub Reviewed
Published
Jun 21, 2022
to the GitHub Advisory Database
•
Updated Jan 27, 2023
Description
Published by the National Vulnerability Database
Jun 20, 2022
Published to the GitHub Advisory Database
Jun 21, 2022
Reviewed
Jun 29, 2022
Last updated
Jan 27, 2023
A vulnerability, which was classified as problematic, was found in Elefant CMS 1.3.12-RC. This affects an unknown part of the component Blog Post Handler. The manipulation leads to basic cross site scripting (Persistent). It is possible to initiate the attack remotely. Upgrading to version 1.3.13 is able to address this issue. It is recommended to upgrade the affected component.
References