Unscored CVE-2004-2261 EUVD-2004-2253GHSA-xx4m-fcjj-4mc6

Cross-site scripting (XSS) vulnerability in e107 allows remote attackers to inject arbitrary script or HTML via the "login name/author" fie…

Published Jul 19, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

Cross-site scripting (XSS) vulnerability in e107 allows remote attackers to inject arbitrary script or HTML via the "login name/author" field in the (1) news submit or (2) article submit functions.

References

e107-news-submit-xss(16087) vdb-entry
5982 vdb-entry
1010084 vdb-entry
10293 vdb-entry
11567 third-party-advisory