CVE-2017-20061

🗓️ 20 Jun 2022 04:50:31Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 40 Views🌐 WEB

Vulnerability in Elefant CMS 1.3.12-RC allows remote attackers to conduct cross-site scripting attacks via unspecified vectors

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2017-20061	20 Jun 202212:26	–	circl
CNNVD	Elefant CMS 跨站脚本漏洞	20 Jun 202200:00	–	cnnvd
Cvelist	CVE-2017-20061 Elefant CMS extended Reflected cross site scriting	20 Jun 202204:50	–	cvelist
EUVD	EUVD-2022-6067	3 Oct 202520:07	–	euvd
Github Security Blog	Cross site scripting in Elefant CMS	21 Jun 202200:00	–	github
NVD	CVE-2017-20061	20 Jun 202205:15	–	nvd
OSV	GHSA-HGM9-PWW2-93PC Cross site scripting in Elefant CMS	21 Jun 202200:00	–	osv
Prion	Cross site scripting	20 Jun 202205:15	–	prion
RedhatCVE	CVE-2017-20061	22 May 202501:55	–	redhatcve
Vulnrichment	CVE-2017-20061 Elefant CMS extended Reflected cross site scriting	20 Jun 202204:50	–	vulnrichment

NVD

Node

elefantcms elefant_cmsMatch1.3.12rc

[
  {
    "product": "CMS",
    "vendor": "Elefant",
    "versions": [
      {
        "status": "affected",
        "version": "1.3.12-RC"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
seclists	www.seclists.org/fulldisclosure/2017/Feb/36

Parameter	Position	Path	Description	CWE
<payload_in_parameter_name>	query param	admin/extended	Reflected XSS via manipulation of a parameter name on /admin/extended	CWE-79, CWE-80
%3Cimg%20src=no%20onerror=alert(1)%3E	query param	admin/extended	Reflected XSS via manipulation of a parameter name on /admin/extended	CWE-79, CWE-80

21 Nov 2024 03:22Current

4.9Medium risk

Vulners AI Score4.9

CVSS 23.5

CVSS 3.14.3 - 5.4

EPSS0.00195

SSVC