Description
e107 2.1.4 is vulnerable to cross-site request forgery in plugin-installing, meta-changing, and settings-changing. A malicious web page can use forged requests to make e107 download and install a plug-in provided by the attacker.
Remediation
References
Related Vulnerabilities
Moodle Improper Authentication Vulnerability (CVE-2014-3552)
WordPress Plugin Featured Comments Cross-Site Request Forgery (1.2.1)
WordPress 2.8 Multiple Existing/Non-Existing Username Enumeration Weaknesses (0.6.2 - 2.8)
Oracle JRE CVE-2024-20919 Vulnerability (CVE-2024-20919)
WordPress Plugin Data Tables Generator by Supsystic Security Bypass (1.10.25)