CVE-2023-36121: XSS

Published Aug 1, 2023

Updated

Cross Site Scripting vulnerability in e107 v.2.3.2 allows a remote attacker to execute arbitrary code via the description function in the SEO project.

Affected Software

1 affected component

e107 e107=2.3.2

Event History

Aug 1, 2023

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Frequently Asked Questions

What is CVE-2023-36121?

CVE-2023-36121 is a Cross Site Scripting vulnerability in e107 v.2.3.2.

How does CVE-2023-36121 affect e107?

CVE-2023-36121 allows a remote attacker to execute arbitrary code via the description function in the SEO project in e107 v.2.3.2.

What is the severity of CVE-2023-36121?

CVE-2023-36121 has a severity rating of medium with a CVSS score of 5.4.

How can I fix CVE-2023-36121?

To fix CVE-2023-36121, it is recommended to update e107 to a version that includes a patch for this vulnerability.

Where can I find more information about CVE-2023-36121?

You can find more information about CVE-2023-36121 at the following references: [Link 1](https://www.exploit-db.com/exploits/51449), [Link 2](https://www.chtsecurity.com/news/6c6675d4-3254-46ce-a16d-26523ff80540), [Link 3](https://www.chtsecurity.com/news/0a4743a5-491e-4685-95ee-df8316ab5284).