CVE-2026-114407 | e107inc e107 up to 2.3.12 Form search.php parse_str author cross site scripting

October 21, 2026 Yanac

A vulnerability was found in e107inc e107 up to 2.3.12. It has been declared as problematic. This issue affects the function parse_str of the file search.php of the component Form Handler. Executing a manipulation of the argument Author can lead to cross site scripting.

This vulnerability is registered as CVE-2026-114407. It is possible to launch the attack remotely. No exploit is available.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More