Description e107 2.1.7 has CSRF resulting in arbitrary user deletion. Remediation References CVE-2018-11127 Related Vulnerabilities Jboss EAP Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') Vulnerability (CVE-2018-1047) WordPress Plugin Simple Events Calendar SQL Injection (1.3.5) Moodle Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-2358) Apache Traffic Server Improper Input Validation Vulnerability (CVE-2021-37147) WordPress Plugin Fancy Product Designer-WooCommerce SQL Injection (4.7.4) Severity Medium Classification CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N Tags Missing Update Known Vulnerabilities CWE-352 CVE-2018-11127