Description

Cross-site scripting (XSS) vulnerability in e107_plugins/content/handlers/content_preset.php in e107 before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via the query string.

Remediation

References

CVE-2013-2750

Related Vulnerabilities

WordPress Plugin WP Symposium Multiple Vulnerabilities (14.10)

WordPress Plugin Polls CP Unspecified Vulnerability (1.0.17)

Serendipity Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2011-3800)

WordPress Plugin BSK PDF Manager SQL Injection (3.1.1)

MySQL CVE-2020-14777 Vulnerability (CVE-2020-14777)

Severity

Medium

Classification

CVE-2013-2750 CWE-707

Tags

Missing Update Known Vulnerabilities