Priority HIGH 82
e107 is a content management system (CMS).
e107inc
Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high3CVSS 7.0–8.9
Exploited now
e107inc records in CISA KEVNo e107inc vulnerabilities are listed in CISA KEV.
Records
9 records
Priority HIGH 70
e107 is a content management system (CMS).
TI-2026-41663 CVE-2026-57859
e107 Second-Order Code Execution via eval()-Based Deserialization in e_array::unserialize()
Priority HIGH 69
e107 prior to version 2.3.8 contains a code execution vulnerability in the e_array deserialization handler that allows an attacker with out-of-band database write access to execute arbitrary PHP code by storing a crafted…
TI-2026-36251 CVE-2026-48997
e107: Command Injection via shell expansion in ImageMagick resize destination path
Priority MEDIUM 64
e107 is a content management system (CMS).
TI-2026-34276 CVE-2026-46620
e107: CSRF in comment.php moderation endpoints via token-optional validation in session_handler::check()
Priority MEDIUM 62
e107 is a content management system (CMS).
TI-2026-31991 CVE-2026-43934
e107: Broken Access Control in e107 comment edit allows cross-user comment modification
Priority MEDIUM 62
e107 is a content management system (CMS).
Priority MEDIUM 53
e107 is a content management system (CMS).
Priority MEDIUM 49
e107 is a content management system (CMS).
TI-2026-78761 CVE-2026-114407 · GHSA-26h5-jjjv-6774
e107 CMS Reflected XSS via search.php author Parameter
Priority LOW 23
e107 CMS before 2.3.13 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious HTML by manipulating the author GET parameter in search.php, which is parsed with p…