Description
Cross-site scripting (XSS) vulnerability in usersettings.php in e107 2.0.0 allows remote attackers to inject arbitrary web script or HTML via the "Real Name" value.
Remediation
References
Related Vulnerabilities
Apache Traffic Server Stack-based Buffer Overflow Vulnerability (CVE-2026-58180)
WordPress Plugin WordPress Responsive Preview Cross-Site Scripting (1.1)
WordPress Plugin Side Menu Lite-add sticky fixed buttons SQL Injection (2.2)
WordPress Plugin Events Registration with PayPal IPN Multiple SQL Injection Vulnerabilities (2.1.2)
Skipper Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-23742)