A vulnerability, which was classified as problematic, has been found in Elefant CMS 1.3.12-RC. Affected by this issue is some unknown functionality of the component Title Handler. The manipulation with the input </title><img src=no onerror=alert(1)> leads to basic cross site scripting (Persistent). The attack may be launched remotely. Upgrading to version 1.3.13 is able to address this issue. It is recommended to upgrade the affected component.
More Stories
nodejs-bash-language-server-5.6.0-2.fc42 nodejs-pnpm-10.9.0-1.fc42
FEDORA-2025-69a1acbbc0 Packages in this update: nodejs-bash-language-server-5.6.0-2.fc42 nodejs-pnpm-10.9.0-1.fc42 Update description: Update pnpm to version 10.9.0 to fix CVE-2024-47829 and nodejs-bash-language-server to...
valkey-8.0.3-1.fc41
FEDORA-2025-d191ee2f9a Packages in this update: valkey-8.0.3-1.fc41 Update description: Valkey 8.0.3 - Released Wed 23 Apr 2025 Upgrade urgency SECURITY: This...
valkey-8.0.3-1.el9
FEDORA-EPEL-2025-eb3543f6b8 Packages in this update: valkey-8.0.3-1.el9 Update description: Valkey 8.0.3 - Released Wed 23 Apr 2025 Upgrade urgency SECURITY: This...
valkey-8.0.3-1.fc42
FEDORA-2025-2ccc1f4ed9 Packages in this update: valkey-8.0.3-1.fc42 Update description: Valkey 8.0.3 - Released Wed 23 Apr 2025 Upgrade urgency SECURITY: This...
valkey-8.0.3-1.fc40
FEDORA-2025-59ebc165fc Packages in this update: valkey-8.0.3-1.fc40 Update description: Valkey 8.0.3 - Released Wed 23 Apr 2025 Upgrade urgency SECURITY: This...
valkey-8.0.3-1.el8
FEDORA-EPEL-2025-a73f52377d Packages in this update: valkey-8.0.3-1.el8 Update description: Valkey 8.0.3 - Released Wed 23 Apr 2025 Upgrade urgency SECURITY: This...