In Exponent CMS before 2.4.1 Patch #5, XSS in elFinder is possible in framework/modules/file/connector/elfinder.php.

Published Apr 24, 2017 · Updated Aug 5, 2024 · Assigned by mitre