Chengable

#19680de 53,622
13.3CVSS total
Vulnerabilidades · 2
Média
1
Alta
1
PT-2018-6741
7.2
2018-03-04
Exponent · Exponent Cms · CVE-2017-18213
Name of the Vulnerable Software and Affected Versions: Exponent CMS versions prior to 2.4.1 Patch #6 Description: The issue allows certain admin users to elevate their privileges. Recommendations: For versions prior to 2.4.1 Patch #6, update to version 2.4.1 Patch #6 or later to resolve the issue.
PT-2017-18111
6.1
2017-04-24
Studio 42 · Elfinder · CVE-2017-8085
**Name of the Vulnerable Software and Affected Versions** Exponent CMS versions prior to 2.4.1 Patch #5 **Description** The issue allows for XSS in elFinder, which is located in framework/modules/file/connector/elfinder.php. **Recommendations** For versions prior to 2.4.1 Patch #5, update to version 2.4.1 Patch #5 or later to resolve the issue.