Description

Cross-site scripting (XSS) vulnerability in the registration page in e107, probably 1.0.1, allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Remediation

References

CVE-2012-3843

Related Vulnerabilities

Apache Traffic Server HTTP Request Smuggling Vulnerability (CVE-2020-17509 )

WordPress Plugin AVK-Shop Multiple Cross-Site Scripting Vulnerabilities (1.1.1)

WordPress Plugin Easy Accordion-Best Accordion FAQ Cross-Site Scripting (2.0.21)

PHP Other Vulnerability (CVE-2002-2214)

WordPress Plugin Feed Them Gallery Cross-Site Scripting (1.1.8)

Severity

Medium

Classification

CVE-2012-3843 CWE-707

Tags

Missing Update Known Vulnerabilities