Description
Multiple cross-site scripting (XSS) vulnerabilities in e107 0.615 allow remote attackers to inject arbitrary web script or HTML via the (1) LAN_407 parameter to clock_menu.php, (2) "email article to a friend" field, (3) "submit news" field, or (4) avmsg parameter to usersettings.php.
Remediation
References
Related Vulnerabilities
WordPress Plugin Modern Events Calendar Lite Arbitrary File Upload (7.11.0)
WordPress Plugin Movies Cross-Site Scripting (0.6)
PHP Improper Input Validation Vulnerability (CVE-2007-2509)
Oracle HTTP Server CVE-2022-21271 Vulnerability (CVE-2022-21271)
WordPress Plugin All-in-One WP Migration Cross-Site Scripting (7.62)