Skip to content
OpenAdvisories

Vendor

e107

8 known vulnerabilities.

Products

e107 CMS 6 CMS 1 e107 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2026-72599

    e107 e107 - SQL Injection

    An SQL injection vulnerability in e107 2.4.0 allows unauthenticated remote attackers to execute arbitrary SQL via the news item page ID parameter. The parameter is concatenated without escaping into a SQL WHERE clause. An unauthenticated attacker can read, mo…

    e107 e107
  • Critical 9.8
    CVE-2022-50905

    e107 CMS v3.2.1 - Reflected XSS via Comment Flow

    e107 CMS version 3.2.1 contains multiple vulnerabilities that allow cross-site scripting (XSS) attacks. The first vulnerability is a reflected XSS that occurs in the news comment functionality when authenticated users interact with the comment form. An attack…

    e107 e107 CMS