Description
Cross-site scripting (XSS) vulnerability in e107_admin/filemanager.php in e107 1.0.4 allows remote attackers to inject arbitrary web script or HTML via the e107_files/ file path in the QUERY_STRING.
Remediation
References
Related Vulnerabilities
WordPress Plugin PowerPress Podcasting by Blubrry Cross-Site Scripting (6.0)
WordPress Plugin Sitewide Notice WP Cross-Site Scripting (2.2)
OpenSSL Permissions, Privileges, and Access Controls Vulnerability (CVE-2011-1473)
WordPress 2.1.2 Multiple Vulnerabilities (2.1 - 2.1.2)
WordPress Plugin Mobile Events Manager CSV Injection (1.4.7)