CVE-2021-27885: e107

High severity, CVSS 8.8. EPSS: 3.2% chance of exploitation in the next 30 days.

usersettings.php in e107 through 2.3.0 lacks a certain e_TOKEN protection mechanism.

Affected products

• e107 e107: up to and including 2.3.0

Published 2021-03-02. Last modified 2026-06-17.