What’s Vulnerable › Vulnerabilities

CVE-2011-0457

• Severity: medium (CVSS 4.3 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2011-03-15 · updated 2026-06-16
• Weakness: CWE-79

Description

Cross-site scripting (XSS) vulnerability in e107 0.7.22 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected products

• e107 CMS: through 0.7.22; 0.6_10, 0.6_11, 0.6_12, 0.6_13, 0.6_14, 0.6_15 (+58)

References

• http://e107.org/comment.php?comment.news.872
• http://e107.org/svn_changelog.php?version=0.7.23
• http://jvn.jp/en/jp/JVN01635457/index.html
• http://e107.org/comment.php?comment.news.872
• http://e107.org/svn_changelog.php?version=0.7.23
• http://jvn.jp/en/jp/JVN01635457/index.html

Get alerted when CVE-2011-0457 or the next vulnerability affects your stack