CVE-2018-16975

CVE-2018-16975 is a critical PHP code execution vulnerability affecting Elefant CMS versions prior to 2.0.7. An attacker can exploit insufficient input validation in the stylesheet creation process to upload and execute malicious PHP code. With a CVSS score of 9.8, this vulnerability poses a severe risk, allowing unauthenticated attackers to achieve full compromise of the affected system with low attack complexity. Despite its critical severity, there is no evidence of active exploitation, publicly available exploit code in Metasploit or ExploitDB, or significant community discussion or media coverage.