Description

Cross-site scripting (XSS) vulnerability in the registration page in e107, probably 1.0.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2012-3843

Related Vulnerabilities

MySQL CVE-2022-21483 Vulnerability (CVE-2022-21483)

Artifactory Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-1000623)

WordPress Plugin CMS Tree Page View Multiple Vulnerabilities (1.4)

WordPress Plugin Ultimate FAQ Cross-Site Scripting (1.8.29)

PostgreSQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-3488)

Severity

Medium

Classification

CVE-2012-3843 CWE-707

Tags

Missing Update Known Vulnerabilities