Read the docs
TI-2022-26359 Aliases CVE-2022-50905GHSA-7pf6-4mfj-vmpf

e107 CMS v3.2.1 - Reflected XSS via Comment Flow

Priority HIGH 75CWE-79Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Cross-site scripting
Confidentiality · integrity · availability
High · High · High
Fix status
No fix listed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA. Impact type from CWE-79.

Summary

e107 CMS version 3.2.1 contains multiple vulnerabilities that allow cross-site scripting (XSS) attacks. The first vulnerability is a reflected XSS that occurs in the news comment functionality when authenticated users interact with the comment form. An attacker can inject malicious JavaScript code through the URL parameter that gets executed when users click outside the comment field after typing content. The second vulnerability involves an upload restriction bypass for authenticated administrators, allowing them to upload SVG files containing malicious code through the media manager's remote URL upload feature. This results in stored XSS when the uploaded SVG files are accessed. These vulnerabilities were discovered by Hubert Wojciechowski and affect the news.php and image.php components of the CMS.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.007 53rd percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by the CNA and NVD
Fix No fix listed No fixed version in the sources yet

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
e107e107 CMS3.2.1—No fix listedCNA
  • e107 CMS Vendore107 Affected 3.2.1 Fixed in — No fix listed CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:e107:e107:3.2.1:*:*:*:*:*:*:*3.2.1Vulnerablee107
  • cpe:2.3:a:e107:e107:3.2.1:*:*:*:*:*:*:* Versions 3.2.1 Vulnerable ·e107

Remediation

No fixed version listed by the sources yet.

Timeline

  1. 2026-10-02 Threatist record created from CVE-2022-50905
  2. 2026-10-03 Alias added: GHSA-7pf6-4mfj-vmpf

References

Exploit 1

Other 2

  • TI-2022-26369 e107 CMS v3.2.1 - Upload restriction bypass (Authenticated [Admin])+ Server file override CVSS 4.0HIGH 8.7
  • TI-2022-26391 e107 CMS v3.2.1 - Upload Restriction Bypass with Path Traversal File Override CVSS 4.0HIGH 8.6
  • TI-2022-26361 e107 CMS v3.2.1 - Admin Upload Restriction Bypass + RCE CVSS 4.0HIGH 8.6
  • TI-2023-18122 Cross Site Scripting vulnerability in e107 v.2.3.2 allows a remote attacker to execute… CVSS 3.1MEDIUM 5.4
  • TI-2025-10948 e107 CMS Avatar image.php path traversal CVSS 4.0MEDIUM 5.3
  • TI-2022-26360 e107 CMS v3.2.1 - Admin Upload Restriction Bypass + Stored XSS CVSS 4.0MEDIUM 4.8
See all 76 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences