Description
e107 2.1.4 is vulnerable to cross-site request forgery in plugin-installing, meta-changing, and settings-changing. A malicious web page can use forged requests to make e107 download and install a plug-in provided by the attacker.
Unscored
CVE-2017-8098
EUVD-2017-17061GHSA-v422-55fm-7mvx
e107 2.1.4 is vulnerable to cross-site request forgery in plugin-installing, meta-changing, and settings-changing. A malicious web page can…
Published Apr 24, 2017 · Updated Sep 16, 2024 · Assigned by mitre