agentprime: e107Every new CVE for e107.https://agentprime.io/CVE-2026-114407: e107 CMS before 2.3.13 Reflected XSS via search.php author Parameterhttps://agentprime.io/advisories/CVE-2026-114407/https://agentprime.io/advisories/CVE-2026-114407/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 21 Oct 2026 12:01:20 GMTCVECVE-2026-55573: e107: Unsafe deserialization in install.php allows unauthenticated RCE via POP chainhttps://agentprime.io/advisories/CVE-2026-55573/https://agentprime.io/advisories/CVE-2026-55573/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 18:12:58 GMTCVEcriticalCVE-2026-55572: e107: SQL injection in alt_auth plugin (otherdb / e107db backends) via login usernamehttps://agentprime.io/advisories/CVE-2026-55572/https://agentprime.io/advisories/CVE-2026-55572/CVSS 10.0 (Critical). Critical: CVSS score 10.0: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 18:12:10 GMTCVEcriticalCVE-2026-72599: e107 e107 - SQL Injectionhttps://agentprime.io/advisories/CVE-2026-72599/https://agentprime.io/advisories/CVE-2026-72599/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 11 Aug 2026 11:14:15 GMTCVEcriticalCVE-2026-57859: e107 Second-Order Code Execution via eval()-Based Deserialization in e_array::unserialize()https://agentprime.io/advisories/CVE-2026-57859/https://agentprime.io/advisories/CVE-2026-57859/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 30 Jul 2026 13:41:34 GMTCVECVE-2026-48997: e107: Command Injection via shell expansion in ImageMagick resize destination pathhttps://agentprime.io/advisories/CVE-2026-48997/https://agentprime.io/advisories/CVE-2026-48997/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 17 Jun 2026 21:42:59 GMTCVECVE-2026-46620: e107: CSRF in comment.php moderation endpoints via token-optional validation in session_handler::check()https://agentprime.io/advisories/CVE-2026-46620/https://agentprime.io/advisories/CVE-2026-46620/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 May 2026 15:04:32 GMTCVECVE-2026-43935: e107: Host Header Injection in e107 password reset enables phishinghttps://agentprime.io/advisories/CVE-2026-43935/https://agentprime.io/advisories/CVE-2026-43935/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 May 2026 15:01:36 GMTCVECVE-2026-43934: e107: Broken Access Control in e107 comment edit allows cross-user comment modificationhttps://agentprime.io/advisories/CVE-2026-43934/https://agentprime.io/advisories/CVE-2026-43934/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 May 2026 14:54:21 GMTCVECVE-2026-43936: e107: Server-Side Request Forgery (SSRF) in the remote file fetcherhttps://agentprime.io/advisories/CVE-2026-43936/https://agentprime.io/advisories/CVE-2026-43936/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 May 2026 14:51:49 GMTCVE