XSS in E107

CVE-2013-2750

Cross-site scripting (XSS) vulnerability in e107_plugins/content/handlers/content_preset.php in e107 before 1.0.3 allows remote attackers to inject arbitrary web script or HTML via the query string.

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.032 (86.9th percentile) — read the EPSS interpretation.

Affected products

  • E107 — versions 0.7.0, 0.7.1, 0.7.2
  • N/a — versions n/a

Weakness classification (CWE)

References