Description

Cross-site scripting (XSS) vulnerability in e107 0.617 and earlier allows remote attackers to inject arbitrary web script or HTML via nested [url] BBCode tags.

Remediation

References

CVE-2005-2327

Related Vulnerabilities

WordPress Plugin WP Job Manager Cross-Site Scripting (1.26.1)

Apache HTTP Server Improper Authentication Vulnerability (CVE-2017-3167)

Atlassian Confluence Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2016-6668)

b2evolution Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-22841)

WordPress Plugin WOOCS-Currency Switcher for WooCommerce Professional Local File Inclusion (1.3.6.2)

Severity

Medium

Classification

CVE-2005-2327

Tags

Missing Update Known Vulnerabilities