Description

Cross-site scripting (XSS) vulnerability in Chatbox Plugin 1.0 in e107 0.7.2 allows remote attackers to inject arbitrary HTML or web script via a Chatbox, as demonstrated using a SCRIPT element.

Remediation

References

CVE-2006-0857

Related Vulnerabilities

WordPress Plugin Insert or Embed Articulate Content into WordPress Directory Traversal (4.2999)

Jetty Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling') Vulnerability (CVE-2017-7658)

Apache HTTP Server Improper Input Validation Vulnerability (CVE-2016-2161)

WordPress Plugin WP Header Images Cross-Site Scripting (2.0.0)

WordPress Plugin Facebook, Twitter & Google+ Social Widgets Multiple Vulnerabilities (1.3.7)

Severity

Medium

Classification

CVE-2006-0857 CWE-707

Tags

Missing Update Known Vulnerabilities