Description

Cross-site scripting (XSS) vulnerability in Chatbox Plugin 1.0 in e107 0.7.2 allows remote attackers to inject arbitrary HTML or web script via a Chatbox, as demonstrated using a SCRIPT element.

Remediation

References

CVE-2006-0857

Related Vulnerabilities

Nginx Improper Encoding or Escaping of Output Vulnerability (CVE-2013-4547)

Apache Traffic Server CVE-2024-38311 Vulnerability (CVE-2024-38311)

Ruby Permissions, Privileges, and Access Controls Vulnerability (CVE-2012-4481)

MySQL CVE-2021-35631 Vulnerability (CVE-2021-35631)

WordPress Plugin Abstract Submission Local File Inclusion (0.6)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2006-0857