https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T10:47:41.741555+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-68443 EUVD-2026-68443 2026-10-07T10:47:41.803711+00:00 EUVD-2026-68443 https://cve.radiocsirt.org/vuln/fkie_cve-2018-16975 fkie_cve-2018-16975 2026-10-07T10:47:41.803748+00:00

An issue was discovered in Elefant CMS before 2.0.7. There is a PHP Code Execution Vulnerability in /designer/add/stylesheet.php by using a .php extension in the New Stylesheet Name field in conjunction with <?php content, because of insufficient input validation in apps/designer/handlers/csspreview.php.

 https://cve.radiocsirt.org/vuln/ghsa-x2w2-qgv6-8xrm GHSA-x2w2-qgv6-8xrm — Elefant CMS PHP Code Execution Vulnerability 2026-10-07T10:47:41.803782+00:00

Affected: Packagist: elefant/cms

An issue was discovered in Elefant CMS before 2.0.7. There is a PHP Code Execution Vulnerability in `/designer/add/stylesheet.php` by using a `.php` extension in the New Stylesheet Name field in conjunction with `<?php` content, because of insufficient input validation in `apps/designer/handlers/csspreview.php`.

 https://cve.radiocsirt.org/vuln/gsd-2018-16975 gsd-2018-16975 2026-10-07T10:47:41.803807+00:00 gsd-2018-16975