An issue was discovered in Eleanor CMS through 2015-03-19. XSS exists via the ajax.php?direct=admin&file=autocomplete&query=[XSS] URI.

Published Oct 28, 2018 · Updated Aug 5, 2024 · Assigned by mitre