← All advisories

Medium severity4.8NVD Advisory· Published Oct 29, 2018· Updated Jun 17, 2026

CVE-2018-18717

CVE-2018-18717

Description

An issue was discovered in Eleanor CMS through 2015-03-19. XSS exists via the ajax.php?direct=admin&file=autocomplete&query=[XSS] URI.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Eleanor CMS/Eleanor CMSinferred3 versions
<=2015-03-19+ 2 more
- (no CPE)range: <=2015-03-19
- cpe:2.3:a:eleanor-cms:eleanor_cms:*:*:*:*:*:*:*:*range: <=2015-03-19
- (no CPE)range: <=2015-03-19

Patches

Vulnerability mechanics

References

1

github.com/Sunvas/Eleanor-CMS/issues/5nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.