$ cve CVE-2021-27885 JSON

CVE-2021-27885 EXPLOIT

8.8

HIGH · CVSS 3.1 · EPSS 3.2% (pctl 88)

Patch early

A public exploit exists.

usersettings.php in e107 through 2.3.0 lacks a certain e_TOKEN protection mechanism.

CVSS	8.8 (HIGH, v3.1)
Vector	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS	3.21% — more likely to be exploited than 88% of all CVEs
Weakness	CWE-352
On CISA KEV	no
Public exploit	yes
Published	2021-03-02
Last modified	2026-06-17

Vendor	Product
e107	e107

Source	Title	Date
exploit-db	e107 CMS 2.3.0 - CSRF	2021-03-04