Description

Cross-site scripting (XSS) vulnerability in e107 0.7.22 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2011-0457

Related Vulnerabilities

WordPress Plugin WOOCS-Currency Switcher for WooCommerce Professional Cross-Site Scripting (1.3.7)

WordPress Plugin Multi Rating Multiple Vulnerabilities (5.0.5)

WordPress Plugin Ultimate Coming Soon, Maintenance Mode for WordPress-Everest Coming Soon Lite includes Backdoor [Only if downloaded via the vendor website] (1.1.0)

WordPress Plugin Paid Memberships Pro-Restrict Member Access to Content, Courses, Communities-Free or Paid Subscriptions Cross-Site Scripting (2.6.5)

Perl Improper Input Validation Vulnerability (CVE-2015-8853)

Severity

Medium

Classification

CVE-2011-0457 CWE-707

Tags

Missing Update Known Vulnerabilities