Description
Cross-site scripting (XSS) vulnerability in stats.php in e107 allows remote attackers to inject arbitrary web script or HTML via the referer parameter to log.php.
Remediation
References
Related Vulnerabilities
WordPress Plugin Smart Flv 'jwplayer.swf' Multiple Cross-Site Scripting Vulnerabilities (1.0)
ownCloud Exposure of Resource to Wrong Sphere Vulnerability (CVE-2020-36252)
ProjectSend Use of Insufficiently Random Values Vulnerability (CVE-2024-7659)
WordPress Plugin Ruven Toolkit Cross-Site Scripting (1.1)
WordPress Plugin aoringo CAT setter Cross-Site Scripting (0.1.1)