e107 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2010-0997 - Vulnerability Database

e107

e107 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability - CVE-2010-0997

Low

Reference: CVE-2010-0997

NVD Link: https://nvd.nist.gov/vuln/detail/CVE-2010-0997

Title: e107 Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability

Overview:

Cross-site scripting (XSS) vulnerability in 107_plugins/content/content_manager.php in the Content Management plugin in e107 before 0.7.20 when the personal content manager is enabled allows user-assisted remote authenticated users to inject arbitrary web script or HTML via the content_heading parameter.