CVE-2018-15901: e107

High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days.

e107 2.1.8 has CSRF in 'usersettings.php' with an impact of changing details such as passwords of users including administrators.

Affected products

• e107 e107: version 2.1.8 only

Published 2018-08-28. Last modified 2026-06-17.