What’s Vulnerable › Vulnerabilities

CVE-2018-12250

Severity: high (CVSS 7.2 v3.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.6% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2019-07-03 · updated 2026-06-17
Weakness: CWE-89

Description

An issue was discovered in Elite CMS Pro 2.01. In /admin/add_sidebar.php, the ?page= parameter is vulnerable to SQL injection.

Affected products

Elitecms Elite Cms: 2.01

References

Get alerted when CVE-2018-12250 or the next vulnerability affects your stack