Description usersettings.php in e107 through 2.3.0 lacks a certain e_TOKEN protection mechanism. Remediation References CVE-2021-27885 Related Vulnerabilities WordPress Plugin WPtouch 'wptouch_settings' Parameter Cross-Site Scripting (1.9.20) Oracle JRE CVE-2018-2637 Vulnerability (CVE-2018-2637) Rukovoditel Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2022-44945) Piwigo Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2020-19212) SharePoint Incorrect Conversion between Numeric Types Vulnerability (CVE-2025-53733) Severity High Classification CVE-2021-27885 CWE-326 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H Tags Missing Update Known Vulnerabilities