Description
Multiple cross-site scripting (XSS) vulnerabilities in e107 0.615 allow remote attackers to inject arbitrary web script or HTML via the (1) LAN_407 parameter to clock_menu.php, (2) "email article to a friend" field, (3) "submit news" field, or (4) avmsg parameter to usersettings.php.
Remediation
References
Related Vulnerabilities
WordPress Plugin BuddyPress Activity Plus Cross-Site Scripting (1.6.3)
Drupal CVE-2008-1729 Vulnerability (CVE-2008-1729)
Oracle Database Server CVE-2011-0848 Vulnerability (CVE-2011-0848)
WordPress Plugin Easy Google Map Cross-Site Scripting (1.1.4)
Jetty Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2021-28169)