Composer elefant/cms has 13 known advisories in the phpwarden feed. Feed 2026.10.29.1, updated 2026-10-28.
| CVE | Title | Severity | CVSS | Affected | Fixed in |
|---|---|---|---|---|---|
| CVE-2018-16975 | Elefant CMS PHP Code Execution Vulnerability | critical | 9.8 | <2.0.7 | 2.0.7 |
| CVE-2018-16974 | Elefant CMS Code Execution Vulnerability | critical | 9.8 | <2.0.7 | 2.0.7 |
| CVE-2018-15601 | Elefant CMS Improper Input Validation | critical | 9.8 | <2.0.4 | 2.0.4 |
| CVE-2012-1296 | Elefant CMS Multiple XSS Vulnerabilities | medium | 0.0 | >=1.0 and <1.0.2-Beta or >=1.1 and <1.1.5-Beta | 1.0.2-Beta, 1.1.5-Beta |
| CVE-2017-20064 | Code injection in Elefant CMS | high | 8.8 | <1.3.13 | 1.3.13 |
| CVE-2017-20063 | Unrestricted Upload of File with Dangerous Type in Elefant CMS | high | 8.8 | <1.3.13 | 1.3.13 |
| CVE-2017-20058 | Cross site scripting in Elefant CMS | medium | 6.1 | <1.3.13 | 1.3.13 |
| CVE-2018-16387 | Elefant CMS CSRF Vulnerability | high | 8.8 | <2.0.5 | 2.0.5 |
| CVE-2017-20057 | Cross site scripting in Elefant CMS | medium | 6.1 | <1.3.13 | 1.3.13 |
| CVE-2017-20059 | Cross site scripting in Elefant CMS | medium | 5.4 | <1.3.13 | 1.3.13 |
| CVE-2017-20060 | Cross site scripting in Elefant CMS | medium | 5.4 | <1.3.13 | 1.3.13 |
| CVE-2017-20061 | Cross site scripting in Elefant CMS | medium | 5.4 | <1.3.13 | 1.3.13 |
| CVE-2017-20062 | Cross-Site Request Forgery in Elefant CMS | high | 8.8 | <1.3.13 | 1.3.13 |
Find out in one command. phpwarden checks your composer.lock against this advisory and 20,000+ others, ranked by real-world exploitation (CISA KEV + EPSS). Free, offline, open data.
# one-time install pip install phpwarden # then phpwarden deps composer.lock
Or keep it checked automatically: GitHub Action · pre-commit hook · GitLab CI · Laravel artisan command
Install docs How findings are ranked