PT-2022-7931

CVE-2017-20058

·

Published

2022-06-20

·

Updated

2022-06-28

Description by

CVSS 3.1
6.1
Medium
MetricsAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Elefant CMS version 1.3.12-RC
Description A problematic vulnerability was found in the Version Comparison component, leading to basic cross site scripting (Persistent). The attack can be launched remotely.
Recommendations For Elefant CMS version 1.3.12-RC, upgrade to version 1.3.13 to address this issue.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-80: Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)
CWE-79: Improper Neutralization of Input During Web Page Generation (\'Cross-site Scripting\')
Related identifiers
CVE-2017-20058
GHSA-5HFM-G799-WJW6
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com