Description

Cross-site scripting (XSS) vulnerability in Chatbox Plugin 1.0 in e107 0.7.2 allows remote attackers to inject arbitrary HTML or web script via a Chatbox, as demonstrated using a SCRIPT element.

Remediation

References

CVE-2006-0857

Related Vulnerabilities

Contao Improper Privilege Management Vulnerability (CVE-2021-37627)

PHP unspecified remote arbitrary file upload vulnerability

Drupal Core 4.5.x Multiple Vulnerabilities (4.5.0 - 4.5.5)

WebLogic Improper Input Validation Vulnerability (CVE-2020-10693)

Moodle Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2012-2365)

Severity

Medium

Classification

CVE-2006-0857 CWE-707

Tags

Missing Update Known Vulnerabilities