Medium

DATE	CVE	VULNERABILITY TITLE	RISK
2024-01-11	CVE-2022-40361	Cross-site Scripting vulnerability in Elitecms Elite CMS 1.2.11 Cross Site Scripting Vulnerability in Elite CRM v1.2.11 allows attacker to execute arbitrary code via the language parameter to the /ngs/login endpoint. network low complexity elitecms CWE-79	6.1
2022-06-02	CVE-2022-30804	Path Traversal vulnerability in Elitecms Elite CMS 1.01 elitecms v1.01 is vulnerable to Delete any file via /admin/delete_image.php?file=. network low complexity elitecms CWE-22	6.5