EC
Product
e107 CMS
8
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 4Medium 4Low 0
Watch
Add e107 CMS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-47937 | 8.8 | May 10 | e107 CMS 2.3.0 Authenticated Remote Code Execution via Theme Upload Affected: 2.3.0 |
| CVE-2022-50939 | 7.2 | Jan 13 | e107 CMS v3.2.1 - Upload Restriction Bypass with Path Traversal File Override Affected: 3.2.1 |
| CVE-2022-50916 | 7.2 | Jan 13 | e107 CMS v3.2.1 - Upload restriction bypass (Authenticated [Admin])+ Server file override Affected: 3.2.1 |
| CVE-2022-50907 | 7.2 | Jan 13 | e107 CMS v3.2.1 - Admin Upload Restriction Bypass + RCE Affected: 3.2.1 |
| CVE-2022-50905 | 6.1 | Jan 13 | e107 CMS v3.2.1 - Reflected XSS via Comment Flow Affected: 3.2.1 |
| CVE-2023-43874 | 5.4 | Sep 28 | Multiple Cross Site Scripting (XSS) vulnerability in e017 CMS v.2.3.2 allows a local attacker to execute arbitrary code via a crafted script to the Copyright and Author fields in… Affected: 2.3.2 |
| CVE-2023-43873 | 5.4 | Sep 28 | A Cross Site Scripting (XSS) vulnerability in e017 CMS v.2.3.2 allows a local attacker to execute arbitrary code via a crafted script to the Name filed in the Manage Menu Affected: 2.3.2 |
| CVE-2022-50906 | 4.8 | Jan 13 | e107 CMS v3.2.1 - Admin Upload Restriction Bypass + Stored XSS Affected: 3.2.1 |
Showing 8