CVE Catalog
CVE-2023-36121
MediumCVSS 5.4Exploitation Probability (EPSS)
Elevated risk1.07%
60th percentile - higher than 60% of all known CVEs
Summary
Cross Site Scripting vulnerability in e107 v.2.3.2 allows a remote attacker to execute arbitrary code via the description function in the SEO project.
Risk Assessment
An attacker could exploit this vulnerability to gain control over the application, potentially leading to data theft or malware.
Recommendation
It is recommended to update to the latest version of e107 to mitigate this vulnerability and implement appropriate defenses against XSS attacks.
Original NVD description (English source)
Cross Site Scripting vulnerability in e107 v.2.3.2 allows a remote attacker to execute arbitrary code via the description function in the SEO project.