JVN#01635457: e107 vulnerable to cross-site scripting

e107 provided by e107.org is a Content Management System (CMS) software. e107 contains a cross-site scripting vulnerability.

Impact

An arbitrary script may be executed on the user’s web browser.

Solution

Update the software
Update to the latest version according to the information provided by the developer.

Products Affected

• e107 v0.7.22 and earlier