CVE:CVE-2012-6521
CNNVD:CNNVD-201301-488
Elefant CMS 1.2.0版本中的apps/admin/handlers/versions.php中存在跨站脚本漏洞。通过id参数传送到admin/versions，远程攻击者利用该漏洞注入任意web脚本或HTML。
solution:Upgrade elefantcms elefantcms to a higher version than 1.2.0,and avoid the version 1.2.0