CVE-2026-114407— e107 CMS before 2.3.13 Reflected XSS via search.php author Parameter
Quick assessment
Affected
e107inc e107
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 2.3.13 之前的 e107 CMS 中存在一个反射型跨站脚本（XSS）漏洞。该漏洞允许未认证的攻击者通过操纵 search.php 文件中的 author GET 参数来注入恶意 HTML。该参数经过 parse_str() 函数解析后，未经转义即被拼接至表单处理程序的"other"选项键所渲染的 input 标签中。攻击者可构造一个包含特制 author 参数的单一 GET 请求，从而突破 HTML input 标签的限制，注入带有 onerror 事件处理程序的 img 元素，进而在受害者的浏览器会话中
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-114407
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
e107 CMS before 2.3.13 Reflected XSS via search.php author Parameter
Source: CVE Program / CVE List V5
Vulnerability Description
e107 CMS before 2.3.13 contains a reflected cross-site scripting vulnerability that allows unauthenticated attackers to inject malicious HTML by manipulating the author GET parameter in search.php, which is parsed with parse_str() and concatenated unescaped into a rendered input tag via the form handler's 'other' option key. Attackers can craft a single GET request containing a crafted author parameter to break out of the HTML input tag and inject an img element with an onerror handler, executing arbitrary JavaScript in the victim's browser session.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
在Web页面生成时对输入的转义处理不恰当(跨站脚本)
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-114407
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-114407
请登录查看更多情报信息。
Other References for CVE-2026-114407 (3)
-
-
https://github.com/e107inc/e107/security/advisories/GHSA-g7rc-4jvq-27m9 vendor-advisory technical-description
IV. Related Vulnerabilities
Same product: e107
-
CVE-2026-55573
e107: Unsafe deserialization in install.php allows unauthent -
CVE-2026-55572
e107: SQL injection in alt_auth plugin (otherdb / e107db bac -
CVE-2026-72599
e107 e107 - SQL Injection -
CVE-2026-57859
e107 Second-Order Code Execution via eval()-Based Deserializ -
CVE-2026-48997
e107: Command Injection via shell expansion in ImageMagick r
Same vendor: e107inc
-
CVE-2026-55573
e107: Unsafe deserialization in install.php allows unauthent -
CVE-2026-55572
e107: SQL injection in alt_auth plugin (otherdb / e107db bac -
CVE-2026-57859
e107 Second-Order Code Execution via eval()-Based Deserializ -
CVE-2026-48997
e107: Command Injection via shell expansion in ImageMagick r -
CVE-2026-46620
e107: CSRF in comment.php moderation endpoints via token-opt
Same weakness: CWE-79
-
CVE-2026-111848
WordPress Geo Mashup plugin <= 1.13.22 - Cross Site Scriptin -
CVE-2026-111837
WordPress Contest Gallery plugin <= 34.0.1 - Cross Site Scri -
CVE-2026-112221
WordPress SureCart plugin <= 4.9.5 - Cross Site Scripting (X -
CVE-2026-111840
WordPress Paid Videochat Turnkey Site plugin <= 7.5.14 - Cro -
CVE-2026-111838
WordPress ThemeHunk Customizer plugin <= 2.8.7 - Cross Site
V. Comments for CVE-2026-114407
No comments yet