CVE-2018-12250: Elitecms Elite CMS

High severity, CVSS 7.2. EPSS: 1.6% chance of exploitation in the next 30 days.

An issue was discovered in Elite CMS Pro 2.01. In /admin/add_sidebar.php, the ?page= parameter is vulnerable to SQL injection.

Affected products

• Elitecms Elite CMS: version 2.01 only

Published 2019-07-03. Last modified 2026-06-17.