Description

Cross-site scripting (XSS) vulnerability in e107 0.617 and earlier allows remote attackers to inject arbitrary web script or HTML via nested [url] BBCode tags.

Remediation

References

CVE-2005-2327

Related Vulnerabilities

Apache Traffic Server Resource Management Errors Vulnerability (CVE-2016-5396)

WordPress Plugin EME Sync Facebook Events Unspecified Vulnerability (1.0.38)

WordPress Plugin The Plus Addons for Elementor Security Bypass (4.1.10)

Dolibarr Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2020-14209)

Apache Tomcat Other Vulnerability (CVE-2002-2007)

Severity

Medium

Classification

CVE-2005-2327

Tags

Missing Update Known Vulnerabilities