[ Vendor · 3 CVEs ]
e107inc
CVEs affecting e107inc published in the last 30 days, plus any e107inc CVE on CISA's exploited list.
| CVE | Published | Severity | Vulnerability | Signals |
|---|---|---|---|---|
| CVE-2026-114407 | 21 Oct 2026 | CVSS 6.1 | e107inc e107e107 CMS before 2.3.13 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious HTML by… | |
| CVE-2026-55573 | 14 Oct 2026 | CVSS 9.8 | e107inc e107e107 is a content management system (CMS). Prior to 2.3.7, install.php decodes the attacker-controlled previous_steps POST parameter and passes it to… | |
| CVE-2026-55572 | 14 Oct 2026 | CVSS 10.0 | e107inc e107e107 is a content management system (CMS). Prior to 2.3.7, the bundled alt_auth plugin's otherdb and e107db authentication backends interpolate the… |