Description
Cross-site scripting (XSS) vulnerability in Chatbox Plugin 1.0 in e107 0.7.2 allows remote attackers to inject arbitrary HTML or web script via a Chatbox, as demonstrated using a SCRIPT element.
Remediation
References
Related Vulnerabilities
Oracle Database Server CVE-2011-0831 Vulnerability (CVE-2011-0831)
WordPress Plugin wp Dreamwork Gallery Arbitrary File Upload (2.3)
Internet Information Services Other Vulnerability (CVE-2002-1745)
WordPress Plugin WP Easy Gallery Cross-Site Scripting (4.1)
WordPress Plugin Animate It! Cross-Site Request Forgery (2.3.5)