CVE-2011-0457

E107 < 0.7.22 - XSS

Title source: rule

Description

Cross-site scripting (XSS) vulnerability in e107 0.7.22 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

References (3)

[Patch] http://e107.org/comment.php?comment.news.872

[Various Sources] http://e107.org/svn_changelog.php?version=0.7.23

[Third Party Advisory] http://jvn.jp/en/jp/JVN01635457/index.html

Scores

EPSS 0.0025

EPSS Percentile 48.5%

Classification

CWE

CWE-79

Status published

Affected Products (50)

e107/e107 < 0.7.22

e107/e107

... and 35 more

Timeline

Published Mar 15, 2011

Tracked Since Feb 18, 2026