← All advisories

Medium severity6.1NVD Advisory· Published Apr 24, 2017· Updated Jun 17, 2026

CVE-2017-8085

CVE-2017-8085

Description

In Exponent CMS before 2.4.1 Patch #5, XSS in elFinder is possible in framework/modules/file/connector/elfinder.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

1

Exponent/Exponent CMS
cpe:2.3:a:exponentcms:exponent_cms:*:p4:*:*:*:*:*:*
Range: <=2.4.0

Patches

Vulnerability mechanics

References

4

www.exponentcms.org/news/patch-5-released-for-v2-4-1-to-fix-a-few-critical-issuesnvdPatchVendor Advisory
github.com/exponentcms/exponent-cms/commit/0b2241ff1c7d86376fa260c5d4c1714f6cef9c0fnvdPatch
github.com/exponentcms/exponent-cms/releases/tag/v2.4.1patch5nvdPatchVendor Advisory
www.securityfocus.com/bid/98043nvd

News mentions

0

No linked articles in our index yet.