CVE-2018-11734

In e107 v2.1.7, output without filtering results in XSS.
References
Link Resource
https://github.com/e107inc/e107/issues/3170 Issue Tracking Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:e107:e107:2.1.7:*:*:*:*:*:*:*

History

No history.

Information

Published : 2019-07-10 18:15

Updated : 2023-12-10 12:59


NVD link : CVE-2018-11734

Mitre link : CVE-2018-11734

CVE.ORG link : CVE-2018-11734


JSON object : View

Products Affected

e107

  • e107
CWE
CWE-79

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')