Description

Cross-site scripting (XSS) vulnerability in e107_plugins/content/handlers/content_preset.php in e107 before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via the query string.

Remediation

References

CVE-2013-2750

Related Vulnerabilities

Drupal URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2017-6932)

WordPress Plugin YITH Color and Label Variations for WooCommerce Security Bypass (1.8.11)

Joomla Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2020-35614)

WordPress Plugin Appointment Booking Calendar Cross-Site Scripting (1.3.34)

Microsoft SQL Server CVE-2023-36730 Vulnerability (CVE-2023-36730)

Severity

Medium

Classification

CVE-2013-2750 CWE-707

Tags

Missing Update Known Vulnerabilities