Description

Cross-site scripting (XSS) vulnerability in submitnews.php in e107 CMS 0.7.11 allows remote attackers to inject arbitrary web script or HTML via the (1) author_name, (2) itemtitle, and (3) item parameters. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Remediation

References

CVE-2008-6208

Related Vulnerabilities

Oracle JRE CVE-2018-2798 Vulnerability (CVE-2018-2798)

WordPress Plugin BigDoor Quick Gamification for WordPress Cross-Site Scripting (1.0.5)

WordPress 5.8.x Directory Traversal (5.8 - 5.8.9)

WordPress Plugin WP Subscribe Cross-Site Scripting (1.0.2)

WordPress Plugin Contact Form for WordPress-Ultimate Form Builder Lite Multiple Vulnerabilities (1.3.7)

Severity

Medium

Classification

CVE-2008-6208 CWE-707

Tags

Missing Update Known Vulnerabilities