CVE-2017-8098

—

CVSS 3.0

6.5 medium

EPSS

<1%p50

Published

Apr 24, 2017 (Apr 24, 2017)

Modified

Jun 17, 2026

Description

e107 2.1.4 is vulnerable to cross-site request forgery in plugin-installing, meta-changing, and settings-changing. A malicious web page can use forged requests to make e107 download and install a plug-in provided by the attacker.

Vendors: e107
Products: e107
Weakness: CWE-352
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.