Description

Cross-site scripting (XSS) vulnerability in 107_plugins/content/content_manager.php in the Content Management plugin in e107 before 0.7.20, when the personal content manager is enabled, allows user-assisted remote authenticated users to inject arbitrary web script or HTML via the content_heading parameter.

Remediation

References

CVE-2010-0997

Related Vulnerabilities

Jboss EAP Improper Restriction of XML External Entity Reference Vulnerability (CVE-2017-7464)

Oracle JRE CVE-2018-2629 Vulnerability (CVE-2018-2629)

Ruby on Rails Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2008-5189)

Undertow Incorrect Authorization Vulnerability (CVE-2017-12196)

PHP Other Vulnerability (CVE-2015-6838)

Severity

Low

Classification

CVE-2010-0997 CWE-707

Tags

Missing Update Known Vulnerabilities