CVE-2017-8085

In Exponent CMS before 2.4.1 Patch 5, XSS in elFinder is possible in framework/modules/file/connector/elfinder.php...

CVE-2017-8085: Improper Neutralization of Input During Web Page Generation

In Exponent CMS before 2.4.1 Patch 5, XSS in elFinder is possible in framework/modules/file/connector/elfinder.php...

PT-2017-18111

Name of the Vulnerable Software and Affected Versions Exponent CMS versions prior to 2.4.1 Patch 5 Description The issue allows for XSS in elFinder, which is located in framework/modules/file/connector/elfinder.php. Recommendations For versions prior to 2.4.1 Patch 5, update to version 2.4.1 Patc...